<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US">Possibly a better way would be to stick with the single msgs column but in your analysis.cfg where you specifiy the log strings you want
to alert on, you can add GROUP=<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US">i.e. LOG /applogs/was/server/SystemOut.log "java.lang.OutOfMemoryError" COLOR=red GROUP=waslogs<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US">That way when you set up the alerts you can specify the host, the service and the group<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US">HOST=server SERVICE=msgs GROUP=waslogs<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US"> MAIL etc…..<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif""> Xymon [mailto:xymon-bounces@xymon.com]
<b>On Behalf Of </b>Pierre Malenfant<br>
<b>Sent:</b> 20 January 2014 13:54<br>
<b>To:</b> xymon@xymon.com<br>
<b>Subject:</b> [Xymon] Breaking msgs in multiple columns for various log files monitoring<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Hello All,</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">I searched the Xymon Archive without success about this. Found a few inquiries but no solutions.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">I would like to have multiple columns for log file monitoring. I need the exact same thing as msgs, but in many columns to alert differently.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Ex:</span> <br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">System logs -> Alert to sysadmins</span>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Application logs -> Alert to Analysts</span>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">DB logs -> Alert to DBA.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Having the columns named like msgs_sys / msgs_app / msgs_db would make sense to me.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">There may be good ext scripts for this. I tought it would be simpler to have a central setup with the msgs "style".</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">For thoses of you that had the issue, what's your recommendation?</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Thanks in advance!</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Pierre Malenfant</span>
<o:p></o:p></p>
</div>
</div>
<span style="mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;mso-bidi-font-family:
Calibri;color:black"></span><p></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Name & Registered Office:
EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company
No. 00718151.</span></p>
<p class="MsoNormal" style="border:none;mso-border-bottom-alt:solid windowtext 1.5pt;
padding:0cm;mso-padding-alt:0cm 0cm 1.0pt 0cm"><span style="font-size:9.0pt">Express
Gifts Limited is authorised and regulated by the Financial Conduct Authority</span></p>
<hr />
<p class="MsoNormal"><span style="font-size:9.0pt">NOTE: This email and any
information contained within or attached in a separate file is confidential and
intended solely for the Individual to whom it is addressed. The information or
data included is solely for the purpose indicated or previously agreed. Any
information or data included with this e-mail remains the property of Findel
PLC and the recipient will refrain from utilising the information for any
purpose other than that indicated and upon request will destroy the information
and remove it from their records. Any views or opinions presented are solely
those of the author and do not necessarily represent those of Findel PLC. If
you are not the intended recipient, be advised that you have received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. No warranties or assurances are
made in relation to the safety and content of this e-mail and any attachments.
No liability is accepted for any consequences arising from it. Findel Plc
reserves the right to monitor all e-mail communications through its internal
and external networks. If you have received this email in error please notify
our IT helpdesk on +44(0) 1254 303030</span></p>
<p class="MsoNormal"><span style="font-size:9.0pt"> </span></p>
</body>
</html>