Hey guys,

I want to monitor a log file of an application. The application writes an continues log.

I tried to use the file content sensor, but it will always stay on "warning", because the log won't change the occurrence of the keyword. So what I would like to have is the following scenario:

1. Keyword appears --> "warning status" 2. Admin looks it ups/fixes the application and confirms the "Warning" 3. Sensor only searches for the new occurrences

The problem with the standard solution is, that it will always bring up the old entrys.

Thanks in advance :)

Article Comments

Hello,

thank you very much for your KB-Post. I'm very sorry, the File Content sensor is not able to 'acknowledge' known occurrences of the keyword. Please either delete teh logfile after such an incident, or please try using a self-written script, running as a Custom Script/Exe Sensor.

best regards.


Jan, 2014 - Permalink

Thank you for your reply.

Is there any chance that I am able to "stop" the sensor if a keyword occurs?


Jan, 2014 - Permalink

Sorry, no it's not possible to stop the sensor at a certain point in the file.


Jan, 2014 - Permalink