Brad – if I recall correctly – the rollover is something we had a problem with…. I believe we had problems monitoring SMS/SCCM log files at one time for this same reason at RTM.

 

It is very possible that our log file monitor has trouble with the rollover process, because of the way we try to lock the file, and keep a watermark.

 

You will probably have to open a case for this specific issue to find out exactly what’s up with it.

 

 

 

I have been asked to monitor a plain text log for a specific piece of text and alert on it. I set up a rule that correctly finds that piece of text and opens an alert, but after a period of time it stops working.

The log file I am monitoring grows to 5MB, dumps to a time stamped log file, and then starts over. I think this roll over process is what’s causing my rule to stop working.

Has anyone else run into this problem or have any suggestions on how to deal with it?

Brad Mueller

Central Technology Services

2100 Stewart Drive

Jefferson City, MO 65109

(573) 634-5600 ext. 6423

brad_mueller@centraltechnology.net

**************************************************************************************************Note: The information contained in this message may be privileged and confidential and protected from disclosure.  If the reader of this message is not the intended  recipient, or an employee or agent responsible for delivering this message to  the intended recipient, you are hereby notified that any dissemination,   distribution or copying of this communication is strictly prohibited. If you  have received this communication in error, please notify us immediately by  replying to the message and deleting it from your computer. **************************************************************************************************

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/momlist/

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/momlist/