Using logmon with multiline log records

Discussion created by ray.wood on Mar 4, 2011
Latest reply on Mar 4, 2016 by Tomas Vrbka

A prospect wants to use logmon to process the AIX errpt log output. The format of the errors is such that a single error will span multiple log lines. This can be defined to the logmon profile through the Format option. OK so far.


The problem comes when we want to include all of the lines in that logical log entry in the alarm message field. When it comes to this part logmon still treats each line within the logical entry as a seperate record. There is no variable that can be used in the message field to represent "all lines". Instead you have to add a variable for each individual line and then add those variables to the message field (e.g. $var1 $var2 $var3). This works fine when there are a fixed number of lines in the logical record but not so good when the number of lines varies. If there were only 2 lines the variable $var3 would print as $var3 rather than null or blank.


Has anyone found a good way of handling monitoring of the AIX errpt output (or similar) specifically including all of the format lines in the alarm message?