Hi, very very good software. (RCC is GREAT!!!)
now the quesition:
i'm using a "text log test"; the log is generated by a system connected with GSM badge readers. the log looks like..
2005/11/09 - 10:10:44 Starting download session
2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
2005/11/09 - 10:28:08 - 203 - Presenze THA:BELGIOIOSO_24 (Bad reply to dial command: <NO CARRIER>)
2005/11/09 - 10:28:23 Presenze THA:..... and so on
My setting is "look for" "string "--> "203 - Presenze THA:" that is the event that i want monitor; and "warn all new events"
My system generate new log lines every about 4 hours (when terminals are called) but in the case that i reported, where "BELGIOIOSO_24" is reported also in prevoius event and is recurrent (we ill repair it in few time) in my alert is only present "GORKi_29" (that is really the only "new event" in the log).
This is the reported alert
-------------------------------------------------
Date : 09/11/2005 10:19:42
Reply : 2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
Comment : TextLog: ph133015\traxit32\TRAXiT.LOG
-------------------------------------------------
What can i set to see all "203 - Presenze THA" and not only last? (log is one)
If "BELGIOIOSO_24" is the unique bad event found it is reported; but if it is "only one" of varoius new events and is recurrent it is not reported also if present.
Have I to set a separate rule for all my terminals?
Regards
Tiziano
Text Log test
So, problem is you are not receiving notifications about all new events?
Most likelly you have not selected "Repeat: until status changes" option for the alert that is assigned to the test.
http://www.ks-soft.net/hostmon.eng/mfra ... properties
Regards
Alex
Most likelly you have not selected "Repeat: until status changes" option for the alert that is assigned to the test.
http://www.ks-soft.net/hostmon.eng/mfra ... properties
Regards
Alex
dear Alex
I'm in difficult to explain my question.
example:
My textlog at 05.00 am contains "terminal 1 error"
HostMonitor is looking this kind of "error" ad it is reported.
at 09.00AM there are two errors:
one is the same of 05.00AM "terminal 1 error" that is present because not repaired and a new event is "terminal 22 error". In my textlog I can see:
09.00 AM "terminal 22 error".
09.01 AM "terminal 1 error".
But terminal 1 was reported in prevoius notification and is not recognized as new: only "terminal 22 error" is reported because it is really new.
Problem is not in alert but now that i'm writing may be that I have understand your replay: one report contains only ONE event? If so I understand. But also in HostmMonitor quicklog if there are two errors i can see only one, why?
these are EXACTLY the two lines in the textlog:
-------------------------
2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
2005/11/09 - 10:28:08 - 203 - Presenze THA:BELGIOIOSO_24 (Bad reply to dial command: <NO CARRIER>)
-------------------------
this is quick log
09/11/2005 10.39.44 Ok
09/11/2005 10.19.42 Bad 2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
09/11/2005 0.08.38 Ok
where is "BELGIOIOSO_24"?
sorry for the long msg
Regards
Tiziano
I'm in difficult to explain my question.
example:
My textlog at 05.00 am contains "terminal 1 error"
HostMonitor is looking this kind of "error" ad it is reported.
at 09.00AM there are two errors:
one is the same of 05.00AM "terminal 1 error" that is present because not repaired and a new event is "terminal 22 error". In my textlog I can see:
09.00 AM "terminal 22 error".
09.01 AM "terminal 1 error".
But terminal 1 was reported in prevoius notification and is not recognized as new: only "terminal 22 error" is reported because it is really new.
Problem is not in alert but now that i'm writing may be that I have understand your replay: one report contains only ONE event? If so I understand. But also in HostmMonitor quicklog if there are two errors i can see only one, why?
these are EXACTLY the two lines in the textlog:
-------------------------
2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
2005/11/09 - 10:28:08 - 203 - Presenze THA:BELGIOIOSO_24 (Bad reply to dial command: <NO CARRIER>)
-------------------------
this is quick log
09/11/2005 10.39.44 Ok
09/11/2005 10.19.42 Bad 2005/11/09 - 10:19:38 - 203 - Presenze THA:GORKI_29 (EOT command ignored: <>)
09/11/2005 0.08.38 Ok
where is "BELGIOIOSO_24"?
sorry for the long msg
Regards
Tiziano
There are 2 new events for HostMonitor. HM doesn't know have you fixed some problem or not. It simply found 2 new records:one is the same of 05.00AM "terminal 1 error" that is present because not repaired and a new event is "terminal 22 error". In my textlog I can see:
09.00 AM "terminal 22 error".
09.01 AM "terminal 1 error".
But terminal 1 was reported in prevoius notification and is not recognized as new: only "terminal 22 error" is reported because it is really new.
09.00 AM "terminal 22 error".
09.01 AM "terminal 1 error".
So, it will report about 2 new record.
If "report" means "action", then yes. Single action can inform you about single record.Problem is not in alert but now that i'm writing may be that I have understand your replay: one report contains only ONE event?
If you want to see all records, set "Full" or "Reply" logging mode for this test item (Test Properties dialog).But also in HostmMonitor quicklog if there are two errors i can see only one, why?
http://www.ks-soft.net/hostmon.eng/mfra ... htm#Dialog
Regards
Alex