Ad Widget

Collapse

How to use logrt key correctly?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • morrolan
    Junior Member
    • Aug 2013
    • 15

    #1

    How to use logrt key correctly?

    Hi,

    I am trying to find examples of a keyword in a logfile - namely the word "ERROR".

    My system uses logfile rotation, so I have created the following regular expression:

    [0-9]+_UFC.ListProcessor.exe_[0-9]{1,4}_[0-9].log
    Which works fine, and when I go into Administration > Regular Expressions and test it against the following filename, it works correctly:

    20140919_UFC.ListProcessor.exe_7984_5.log
    However, I am unable to retrieve data using the following Item Key:

    logrt["C:\UFC\log\[0-9]+_UFC.ListProcessor.exe_[0-9]{1,4}_[0-9].log","ERROR"]
    I have the item defined as an Active check, other Active checks work on this host, I have the Information Type set to Log, and a Log time format of: dd/MM/yyyy hh:mm:ss

    The content of the logfile begins with the following:

    19/09/2014 03:05:16.323 ERROR: Converting a message from transmission format:
    I also have a new Application of "Logfile", but when I go to Latest Data I don't see the Application as it hasn't sent any data to the server?

    Kind Regards,
    Morrolan
Working...