I am trying to match a sting 'Broken Pipe', I tried matching it via using "Broken Pipe" as well as *Broken Pipe* but with these I am getting false alarms. how can we do that.
What exactly do you mean when you say false alarms? Do you mean you're getting alarms that don't contain "Broken Pipe" at all? I make all my matches in logmon reges, so I would go for /Broken\sPipe/
Thanks for the help.
I have applied the changes, though I stop getting false alarms for this particular string but getting for similar other strings.
with False I am referring to the fact that there is not string match to the input string but still an alarm is getting created.
I need to find exact matches for the following strings in my logs -
1. alert on deadlock word in the file - i am giving expressin as /'*deadlock*'/ and getting false alarm2. StaleStateException -alert /'*StaleStateException*'/3. SchedulerException i am giving expression as -/'*SchedulerException*'/4. SessionError - expression as /.*SessionError*./5. JDBCConnectionException expression as /'*JDBCConnectionException*'/
But it could depend on how many lines you have. And where in the text your match is.
Retrieving data ...