<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:36.0pt;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.E-MailFormatvorlage19
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:#034BED;}
span.E-MailFormatvorlage21
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:93593162;
        mso-list-type:hybrid;
        mso-list-template-ids:-1696444838 -1008424632 67567619 67567621 67567617 67567619 67567621 67567617 67567619 67567621;}
@list l0:level1
        {mso-level-start-at:0;
        mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Wingdings;
        mso-fareast-font-family:Calibri;
        mso-bidi-font-family:"Times New Roman";}
@list l0:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:"Courier New";}
@list l0:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Wingdings;}
@list l0:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Symbol;}
@list l0:level5
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:"Courier New";}
@list l0:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Wingdings;}
@list l0:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Symbol;}
@list l0:level8
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:"Courier New";}
@list l0:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        font-family:Wingdings;}
@list l1
        {mso-list-id:822964988;
        mso-list-template-ids:254175522;}
@list l1:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:36.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:72.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:108.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:144.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:180.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:216.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:252.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:288.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:324.0pt;
        mso-level-number-position:left;
        text-indent:-18.0pt;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
ol
        {margin-bottom:0cm;}
ul
        {margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">oh yes – that’s a thing that i‘ve totally disregarded.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">However, i cannot get any content of the logfile into the msgs column, even if i surround the filename with quotes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Christian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b>Von:</b> Beck, Zak <zak.beck@accenture.com> <br>
<b>Gesendet:</b> Mittwoch, 19. August 2020 14:49<br>
<b>An:</b> Becker Christian <christian.becker@rhein-zeitung.net>; Jeremy Laidman <jeremy@laidman.org><br>
<b>Cc:</b> xymon@xymon.com<br>
<b>Betreff:</b> RE: [Xymon] xymonpsclient (application) logfile monitoring<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US">Hi<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US">I’m a bit concerned about the space in your log file name – if you look at the
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fxymon.com%2Fhelp%2Fmanpages%2Fman5%2Fanalysis.cfg.5.html&data=02%7C01%7Cchristian.becker%40rhein-zeitung.net%7C7d3a890d567d4080c43408d8443e3249%7C4fed923898bc4f3b96450b99f4d1b669%7C0%7C0%7C637334381209431700&sdata=CGl5QymBE%2BmlqijxBM%2FCLpmWYY1pziV1l5cB7qM9xS4%3D&reserved=0">
analysis.cfg man page</a>, the space is a separator between filename and pattern.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US">Could you try surrounding your filename with quotes too?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED">Zak <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB" style="color:#034BED;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Xymon <<a href="mailto:xymon-bounces@xymon.com">xymon-bounces@xymon.com</a>>
<b>On Behalf Of </b>Becker Christian<br>
<b>Sent:</b> 19 August 2020 08:27<br>
<b>To:</b> Jeremy Laidman <<a href="mailto:jeremy@laidman.org">jeremy@laidman.org</a>><br>
<b>Cc:</b> <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> [External] Re: [Xymon] xymonpsclient (application) logfile monitoring<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" align="center" style="text-align:center"><span style="color:red">This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments.</span><o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:red" align="center">
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Jeremy,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Sorry for writing it a bit weird.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">As soon as i configure the logfile in client-local.cfg and analysis.cfg, it shows up a couple of minutes later in the msgs column showing the name oft he logfile only, not it’s content.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">The upper line says
<span style="color:#0070C0">No entries in C:\Program Files\PATH-TO-LOGFILE\filename.log</span>, the second line says
<span style="color:#0070C0">Full log</span> <span style="color:#0070C0">C:\Program Files\PATH-TO-LOGFILE\filename.log</span> and that’s it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Now i have configured as described by you by enclosing the pattern in quotes:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">LOG C:\Program Files\PATH-TO-LOGFILE\filename.log "Unable to cancel connection to" COLOR=RED</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">After very long time, every now and then (and not on a regular basis…) the appropriate line shows up below the line
<span style="color:#0070C0">Full log</span> <span style="color:#0070C0">C:\Program Files\PATH-TO-LOGFILE\filename.log
</span>but the test stays green, but the pattern is present more than 50 times and it is actually written into the logfile.<o:p></o:p></span></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo3"><span style="mso-fareast-language:EN-US">Does it matter, that the pattern is
<b>NOT</b> at the beginning of the line of the logfile?? (There are time stamps before the pattern and return codes after it….).<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Regards and thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Christian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b>Von:</b> Jeremy Laidman <<a href="mailto:jeremy@laidman.org">jeremy@laidman.org</a>>
<br>
<b>Gesendet:</b> Donnerstag, 13. August 2020 01:43<br>
<b>An:</b> Becker Christian <<a href="mailto:christian.becker@rhein-zeitung.net">christian.becker@rhein-zeitung.net</a>><br>
<b>Cc:</b> <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Betreff:</b> Re: [Xymon] xymonpsclient (application) logfile monitoring<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Hi Christian<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">Sorry, I'm not sure I understand what you mean. "It seems to me that ..." - does that mean: "From reading the docs, it seems to me that expected behaviour is..." or: "After the configuration changes, it seems to me that actual behaviour
 is...". It's my understanding that adding a LOG entry in analysis.cfg is for determining which log lines trigger an alert condition (eg red or yellow), but the rest of the log status page is the same - that is, it contains all of the log lines from the logfile
 since the last client status message (typically in the last 5 minutes).<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The "pattern" is either a string or a regular expression. Your use of dots in the pattern suggest that you're expecting it to be a regular expression. However, you haven't prefixed it with "%" to tell Xymon this is the case. You perhaps
 want:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">LOG C:\Program Files\PATH-TO-LOGFILE\filename.log %<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__eur03.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Funable.to.cancel.connection.to-252F-26data-3D02-257C01-257Cchristian.becker-2540rhein-2Dzeitung.net-257C40afbdde9df94afee73708d83f1971c1-257C4fed923898bc4f3b96450b99f4d1b669-257C0-257C0-257C637328725826273741-26sdata-3DH1Bn0g3yozkqDOrWyIMEdTMlOiIyGV0L37eXQjLmyWE-253D-26reserved-3D0%26d%3DDwMGaQ%26c%3DeIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU%26r%3DS-aLwpx-PHBTBMIG_c2JczRC0SfuZCmsiH9Iams25FI%26m%3D_c36kEJR6dLnD3UjF0N6O5RhkmIJ_fOPzbiONKHFpNw%26s%3D9kFUYjAlXmCCYlxnax7dfxZxUaQdEOQhLJtWl8yZ1ro%26e%3D&data=02%7C01%7Cchristian.becker%40rhein-zeitung.net%7C7d3a890d567d4080c43408d8443e3249%7C4fed923898bc4f3b96450b99f4d1b669%7C0%7C0%7C637334381209431700&sdata=JlR0PNU1sVHhZA9emtKV1EPbuSCzN56X3zwi0fYJnsk%3D&reserved=0">Unable.to.cancel.connection.to</a>
 COLOR=RED</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If the reason for the regexp is only to match spaces, because you don't want the words in the pattern to be treated as different LOG keywords, then you might find it easier to just enclose the pattern in quotes:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">LOG C:\Program Files\PATH-TO-LOGFILE\filename.log "Unable to cancel connection to" COLOR=RED</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Cheers<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Jeremy<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, 12 Aug 2020 at 20:46, Becker Christian <<a href="mailto:christian.becker@rhein-zeitung.net">christian.becker@rhein-zeitung.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hello to the list,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">i need help in setting up logfile monitoring with xymonpsclient.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">My setup is a Windows 10 client pc, running xymonpsclient v2.42, reporting to a xymon server running xymon 4.3.30.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">In the client-local.cfg i have configured the logfile that i want to monitor, and an amount of time later, the logfile shows up in the msgs column.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">After that i configured analysis.cfg to look for a specific pattern in this logfile, it seems to me that only the appearance of this pattern is displayed in the msgs column, but
 nothing else from this logfile.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">In addition tot hat, the msgs column didn’t change to red state.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Here’s the part of my client-local.cfg:<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">[win10client1]</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">log:C:\Program Files\PATH-TO-LOGFILE\filename.log:153600</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">And here the part of my analysis.cfg:<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">HOST=win10client1</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt">
<span style="font-family:"Courier New";color:#0070C0">LOG C:\Program Files\PATH-TO-LOGFILE\filename.log
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__eur03.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Funable.to.cancel.connection.to-252F-26data-3D02-257C01-257Cchristian.becker-2540rhein-2Dzeitung.net-257C40afbdde9df94afee73708d83f1971c1-257C4fed923898bc4f3b96450b99f4d1b669-257C0-257C0-257C637328725826273741-26sdata-3DH1Bn0g3yozkqDOrWyIMEdTMlOiIyGV0L37eXQjLmyWE-253D-26reserved-3D0%26d%3DDwMGaQ%26c%3DeIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU%26r%3DS-aLwpx-PHBTBMIG_c2JczRC0SfuZCmsiH9Iams25FI%26m%3D_c36kEJR6dLnD3UjF0N6O5RhkmIJ_fOPzbiONKHFpNw%26s%3D9kFUYjAlXmCCYlxnax7dfxZxUaQdEOQhLJtWl8yZ1ro%26e%3D&data=02%7C01%7Cchristian.becker%40rhein-zeitung.net%7C7d3a890d567d4080c43408d8443e3249%7C4fed923898bc4f3b96450b99f4d1b669%7C0%7C0%7C637334381209441694&sdata=DIgIWrx2fVnwliF7xj6h%2BD6geKI%2BlEIzYE54xqJHldI%3D&reserved=0" target="_blank">
Unable.to.cancel.connection.to</a> COLOR=RED</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">With this setup it seems to me that only lines containing this pattern
<span style="font-family:"Courier New";color:#0070C0"><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__eur03.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Funable.to.cancel.connection.to-252F-26data-3D02-257C01-257Cchristian.becker-2540rhein-2Dzeitung.net-257C40afbdde9df94afee73708d83f1971c1-257C4fed923898bc4f3b96450b99f4d1b669-257C0-257C0-257C637328725826283696-26sdata-3DC-252FrRN9NdzIR1Vk9UNKVWmD6AySz8TX5gzTDYiIM706c-253D-26reserved-3D0%26d%3DDwMGaQ%26c%3DeIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU%26r%3DS-aLwpx-PHBTBMIG_c2JczRC0SfuZCmsiH9Iams25FI%26m%3D_c36kEJR6dLnD3UjF0N6O5RhkmIJ_fOPzbiONKHFpNw%26s%3DCLN-OR5es5VqC29-Bc3z4lyNr_unUePYbij3mxRom2U%26e%3D&data=02%7C01%7Cchristian.becker%40rhein-zeitung.net%7C7d3a890d567d4080c43408d8443e3249%7C4fed923898bc4f3b96450b99f4d1b669%7C0%7C0%7C637334381209441694&sdata=t6NTYshjvtI1SIHqLG3bzggbsb9ziWL3JS2A8yQSWn4%3D&reserved=0" target="_blank">Unable.to.cancel.connection.to</a></span>
 are displayed in the msgs column of win10client1.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Any idea what i’m doing wrong? Or do i understand any basics the wrong way?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Regards<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Christian<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__eur03.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Flists.xymon.com-252Fmailman-252Flistinfo-252Fxymon-26data-3D02-257C01-257Cchristian.becker-2540rhein-2Dzeitung.net-257C40afbdde9df94afee73708d83f1971c1-257C4fed923898bc4f3b96450b99f4d1b669-257C0-257C0-257C637328725826283696-26sdata-3DJdJoBZV2MI5-252B7Bm8YC0a8k4zxfCKpBlF-252FldnZOyZTKE-253D-26reserved-3D0%26d%3DDwMGaQ%26c%3DeIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU%26r%3DS-aLwpx-PHBTBMIG_c2JczRC0SfuZCmsiH9Iams25FI%26m%3D_c36kEJR6dLnD3UjF0N6O5RhkmIJ_fOPzbiONKHFpNw%26s%3D4hek2pxRQAnXbkWCOcqmauWzpuv9vhHm9Rm7jFQWdys%26e%3D&data=02%7C01%7Cchristian.becker%40rhein-zeitung.net%7C7d3a890d567d4080c43408d8443e3249%7C4fed923898bc4f3b96450b99f4d1b669%7C0%7C0%7C637334381209451693&sdata=5CToVuGVhP6zUBJVG4GBp1zHQZLUwnco4RiE4hZUIRw%3D&reserved=0" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-GB">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:7.5pt;font-family:"Arial",sans-serif;color:gray"><br>
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by
 you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of
 internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement
 at <a href="https://www.accenture.com/us-en/privacy-policy">https://www.accenture.com/us-en/privacy-policy</a>.
<br>
______________________________________________________________________________________<br>
<br>
<a href="http://www.accenture.com">www.accenture.com</a></span><span lang="EN-GB"><o:p></o:p></span></p>
</div>
</body>
</html>