Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Feature request - Log watcher

Hi there,

It is become of increasingly high importance to be able to monitor error messages which appear in log files, similar to the event log watcher for windows. We want to be able to connect to standard plain text log files in windows and unix. Is this on the pipeline? What can we do to get this put in a future release?

Thanks,
chris.

Find more posts tagged with

Accepted answers

All comments

Peter.Cooper

Chris, can you give me some specifics into a file you want APM to scan (and why)?

It helps to take something you currently have, and give us the expected outcome. Otherwise, we run the risk of honoring your feature request ... and miss a key detail for your environment.

So, I'll give you an example from my book. Here's an example scenario that may be close (maybe not):

"We just rolled out a new website format. We believe we got redirects on all the old links, but there may be some we don't know about. I don't want to spend my time forever watching the log files, so I want to get an idea of how many 404s I get on this specific IIS website... then investigate as needed. Some 404s are ligitimate and I want to be able to mask them out."

Thanks!

FormerMember

Hi Peter,

Basically we want to be able to look for a particular error string in a log file and alert accordingly. For example we might want to look for "ERROR 1329" in a windows or unix plain text file and then alert whenever there is an occurence of the string.

If it could work the same as the windows event log watcher then that would be fine. We currently alert on a set of servers event logs and they alert to say "there has been 7 occurences of error: "ERROR 1319" on server XXX in the last 5 minutes".

I know that it would potentially be possible to do this via the script monitor but would be good to have an official template for doing this.

Thanks,

Chris.

FormerMember

Would this feature likely be in the next release?

Also would it be like the event log monitor? Would you have to create another APM monitor for every string you want to monitor for? Or could you allow it to search a list of strings?

Thanks,

Chris.

FormerMember

Would this feature likely be in the next release?

See here for what's we are currently working on:

We can't commit to if and when a feature is going to be in particular release.

aLTeReGo

Chrissmail, I believe the feature you're looking for was released as an application template on Thwack. Below are links to the Linux/Unix and Windows Log Parser Application Templates.

Log Parser Unix/Linux

Log Parser Windows