AnsweredAssumed Answered

UIM Logmon Probe - How can I capture a variable in another line different from the match expression (Watcher Rules)

Question asked by JuanCGomez on Jan 23, 2019

I have the next entry in a LOG file:

   19-01-08;01:24:38.865 \*****  *******
   !!! FROM: DATA1 RE: DATA1
   Host denied New Key message. 

The match expresion is "Host denied New Key message." but I need the variable to capture to be DATA1.  How can I define or capture this variable?

Outcomes