Id like to see an option where an application component that has gone into warning/down/critical can be reset by a keyword or phrase in the event log. Down = "I saw this keyphrase in the event log" UP = "I saw this keyphrase in the event log" durring the last 1.5 polling cycle(s).
For example, the current event log monitor(and i suppose other "log" monitors") can be set to trigger when a phrase is seen in the log. But the application component resets to up only based on some polling time interval or multiplier. Id like to see it where I could have an event log monitor go into a down state when I see the phrase "error with application bla bla bla" but then would stay down until another word or phrase is seen in the log like "error cleared" or "service is now restored" or "its really early and I need caffine". Kind of like taking all the custom options we current have to trigger a down even in an event log monitor and copying them to also be a custom condition to reset the event log monitor to up.
Hope that makes sense. I think it would add some cool functionality.
-b
Top Comments