Configure Search Criterion dialog box


The Configure Search Criterion dialog box allows you to configure multiple search patterns while adding an instance. In addition, you can modify the search criterion using this dialog box. To access this dialog box, either click Continue in the Add File for Label: instanceName dialog box or navigate to Modify > Search Criteria from the LOGT application class menu. For more information about accessing application class menus, see Accessing KM menu commands.

Procedures related to this dialog box

Selecting and configuring files for monitoring

Configuring the search string

Scheduling-file-monitoring

Automatically deleting or archiving log files based on file size

Temporarily-suspending-the-generation-of-events

Items on this dialog box

Item

Description

File Name

Displays the log full file path that will be monitored against the multiple regular expressions that you provided

Search Criterion

This section in the dialog box allows you to define search criterion settings for an individual search criterion. Using this section, you can override the settings for a search criterion defined in the Add File for Label: instanceName dialog box.

Search Identifier

Enter an identification label for the search criterion. This must be unique for a text instance. You can use the same search identifier in other text instances, but not in the same text instance.

You can only use alphanumeric characters such as a-z, A-Z, 0-9, and up to a maximum of 20 characters.

This label appears in the search list and helps you identify the search criterion.

Not (Not applicable for an XML instance)

Select this check box to find the log file text line that does not contain the search string specified in the String1 field.

If you want to find the files that do contain the search string in the String1 field, ensure that this check box is not selected.

String1

Enter the regular expression for the first search string that you want to search in the text instance (4096-byte limit).

For regular expression examples, see Examples-of-regular-expressions-when-used-with-PATROL-objects-and-pathnames.

Not (Not applicable for an XML instance)

Select this check box to find all files that do not contain the search string in the String2 field.

If you want to find the files that do contain the search string in the String2 field, ensure that this check box is not selected.

String2 (Not applicable for an XML instance)

(optional) Enter the regular expression for the second search string that you want to search in the text instance (4096-byte limit).

For regular expression examples, see Examples-of-regular-expressions-when-used-with-PATROL-objects-and-pathnames.

First Number (Not applicable for an XML instance)

Enter a number to specify a starting position of a search range in the matched file.

Op (Not applicable for an XML instance)

Select an operator.

Begin token (Not applicable for an XML instance)

Enter a valid beginning token value.

End token (Not applicable for an XML instance)

Enter a valid ending token value.

Op (Not applicable for an XML instance)

Select an operator

Second Number (Not applicable for an XML instance)

Enter a number to specify an ending position of a search range in the matched file line.

Override default settings

Select this check box to override the default setting for the search criterion that you have specified in the Add file for Label: instanceName dialog box.

Threshold #1

Enter the number of search string matches that must occur before producing a specified state. For example, if the Match Count field value is 3, the text search string must occur 3 times in the monitored file before the KM goes into the state specified by the State list.

This threshold overrides the default threshold specified in the Add file for Label: instanceName dialog box if you select the Override default setting checkbox.

State

Select the state that you want the product to exhibit when the Threshold-Match Count value is reached - None, OK, Warn, or Alarm.

For example, if you want the KM to go into Alarm if the search string is found 3 times in the monitored file, then you would set the value of Threshold #1: Match Count to 3 and select Alarm from the State list.

This state overrides the default state specified in the Add file for Label: instanceName dialog box if you select the Override default setting checkbox.

Threshold #2

If you want the KM to exhibit a second state when a different number of search strings occurs, enter the number of matched search strings in this text box.
Threshold #2 should always be higher than Threshold #1.
For example, if you set the Threshold #1 Match Count to alarm when 3 occurrences of the search string are found and you want the KM to warn when 1 occurrence of the search string is found, enter 1 in the Threshold #2: Match Count text box.
This threshold overrides the default threshold specified in the Add file for Label: instanceName dialog box if you select the Override default setting checkbox.

State

Select the state that the KM will exhibit when the Threshold#2 Match Count value is reached - None, OK, Warn, or Alarm.

Custom Event Message

Enter the message that you want to get displayed when the search criteria are satisfied. For more information, see Customizing event messages.
This message overrides the default message provided in the Add file for Label: instanceName dialog box.

Custom Event Origin

Specify the customized origin for events. If you do not specify an origin, the KM uses the default origin, which is APPCLASS.INSTANCE.textFileName. You can use built-in macros (except the %x-y macro) as the customized origin for events.
For more information about built-in macros, see Customizing event messages.
This origin overrides the default origin provided in the Add file for Label: instanceName dialog box.

Ignore duplicate events for next ... Minutes

specifies an interval in minutes during which the product does not generate an event after the first match and its corresponding event
After the specified time elapses, the search criteria generate an event for the next match.

Search list

The search list displays the entered search criteria. It also displays whether the search criteria is valid or invalid. Each search string added gets appended to the list of search strings. The product populates the search strings in the list with every update.

Add

Select this option to add a new search criterion to the Search list.

Delete

Select this option to delete a search criterion from the Search list.

Modify

Select this option to view and modify a search criterion from the Search list.

Discard changes

Select this check box if you want to revert all changes made in this dialog box and use the original search list.

Update

Updates the search list with the addition, modification, or deletion of a search criterion

Related topics

LOG

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*