PATROL KM for Log Management

The PATROL KM for Log Management monitors text, script, named pipe, and binary files in your environment. The KM provides the following monitoring features:

  • Automatically monitors key log files
  • Monitors files that do not currently exist on the system
  • Monitors log files with dynamic names using wild card characters
  • Monitors the size of log files
  • Monitors the growth rate of log files
  • Monitors the content of log files
  • Monitors the state of log files
  • Monitors the age of the log files
  • Monitors log files using numeric comparisons

The PATROL KM for Log Management also provides the following management features:

  • Triggers alerts when a log file exceeds a specified size
  • Triggers alert when a text string or regular expression is discovered within a log file
  • Creates automated recovery actions when a log file exceeds an acceptable size or growth rate
  • Configures log searches to
    • Ignore subsequent alerts for a specified number of polling cycles if the search finds a matching string or regular expression in a log file
    • Override an ignored alert if the search finds a matching string or regular expression more than n times before the ignore setting is completed
    • Specify the number of log scan cycles after which a WARN or ALARM state is automatically changed to OK
  • Creates robust searches by using NOT and AND statements with the text strings or regular expressions in the log search
  • Alerts for log file age
  • Sets multiple schedules for multiple polling cycles per log file
  • Disables/enables default log monitoring

You can set up the following predefined recovery actions to execute when monitored log files exceed a specified size or growth rate.

  • Clear and back up log files
  • Delete files
  • Run in attended and unattended modes

To get started with the PATROL KM for Log Management, see Configuring PATROL for Log Management..

For detailed instructions, see the BMC PATROL for Log Management 2.7.30 documentation.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*