Monitoring A Regenerated Log File Using Simple Event Detection Unit Monitor in Operations Manager 2007
I am looking to monitor a log file - Simple enough using instructions I found here
http://technet.microsoft.com/en-us/library/bb381375.aspx
This log file gets regenerated every night.
The log file gets renamed and a new file gets generated.
I want to monitor this log file for a specified string of text.
We seem to have issues with SCOM monitoring the newly created log file from the top. Is there any sort of counter we can reset to coincide with the creation of the new log file?
This is my first post and I am still fairly new to SCOM so I hope I have made the issue clear enough to get some help.
Thank you
February 16th, 2011 9:17am
This link should guide you to achive your results.
http://blogs.technet.com/b/timhe/archive/2007/09/11/howto-create-a-generic-text-log-alert-in-scom-2007-or-sce.aspx
Free Windows Admin Tool Kit Click here and download it now
February 16th, 2011 10:12am
Hey MK_84,
Try these links and i am sure you will succeed if not please feel free to post again.
http://systemcentersolutions.wordpress.com/category/log-file-monitoring/
http://blogs.technet.com/kevinholman/archive/2009/06/20/using-a-generic-text-log-rule-to-monitor-an-ascii-text-file-even-when-the-file-is-a-unc-path.aspx
http://blogs.technet.com/jeevanbisht/archive/2008/06/11/opsmgr-2007-how-to-generate-alerts-based-on-generic-csv.aspx
http://contoso.se/blog/?p=281
Cheers.
-Vrkumar01
February 16th, 2011 2:25pm
Thank you all for the info. I created a test monitor and got it to recognize and trigger alerts based on the specified criteria. The real log file I want to monitor does not recreate itself but rather it copy's itself to a date stamped file every night
and then clears out the original log file contents. This is preventing the monitor from starting at line 1 in the log file. Any solutions on how the line counter can be reset when the log file is cleared?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 12:32pm
Thank you all for the info. I created a test monitor and got it to recognize and trigger alerts based on the specified criteria. The real log file I want to monitor does not recreate itself but rather it copy's itself to a date stamped file every night
and then clears out the original log file contents. This is preventing the monitor from starting at line 1 in the log file. Any solutions on how the line counter can be reset when the log file is cleared?
March 10th, 2011 12:32pm