Under NT (TNG 2.4) CaiLogA2,
I currently trap a message EXTIDS :Error. From the NT Application log thats nice and easy.
Recently developers have requested that with the same error (EXTIDS : Error) that if the string for the same error contains the words (Server down system is inactive) then they need a seperate message.
So the question is I would like to have one message record and correlate on the message text.
Has anyone out there (Under TNG EM) managed to take &TEXT and extract a word/s into a usable variable to work with for correlation ?
I would like to say take the 17th word from &TEXT and pass this into SETENVSH <Var> <Var>.. then test this variable for a possible second variation on the event.
1 . SNMP trap Peter is happy
= Basic Alert
2 . SNMP trap Peter is happy not
= Different Alert
Where Peter is happy is the log watcher.
Same log watcher just traping on the additional text (not)rather than having multiple log watchers and Send/DelKeeps in the conlog.
Any advise .... ?
Regards, Steve.
I currently trap a message EXTIDS :Error. From the NT Application log thats nice and easy.
Recently developers have requested that with the same error (EXTIDS : Error) that if the string for the same error contains the words (Server down system is inactive) then they need a seperate message.
So the question is I would like to have one message record and correlate on the message text.
Has anyone out there (Under TNG EM) managed to take &TEXT and extract a word/s into a usable variable to work with for correlation ?
I would like to say take the 17th word from &TEXT and pass this into SETENVSH <Var> <Var>.. then test this variable for a possible second variation on the event.
1 . SNMP trap Peter is happy
= Basic Alert
2 . SNMP trap Peter is happy not
= Different Alert
Where Peter is happy is the log watcher.
Same log watcher just traping on the additional text (not)rather than having multiple log watchers and Send/DelKeeps in the conlog.
Any advise .... ?
Regards, Steve.