Kaseya Community

Log parser to set an alarm

This question is answered

Hello,

I'm very new to Kaseya and recently I was asked to see if I could get the log parser in the monitoring tab to set an alarm whenever ORA-

shows up in the log file.

 

so a typical log would be

 

Current log# 1 seq# 24427 mem# 0: D:\ORACLE\ORADATA\PRODMSDS\REDO01.LOG
Mon Oct 18 06:20:24 2010
Thread 1 advanced to log sequence 24428 (LGWR switch)
  Current log# 2 seq# 24428 mem# 0: D:\ORACLE\ORADATA\PRODMSDS\REDO02.LOG
Mon Oct 18 06:39:05 2010
Thread 1 advanced to log sequence 24429 (LGWR switch)
  Current log# 4 seq# 24429 mem# 0: D:\ORACLE\ORADATA\PRODMSDS\REDO04.LOG
Mon Oct 18 06:49:20 2010
Thread 1 advanced to log sequence 24430 (LGWR switch)
  Current log# 5 seq# 24430 mem# 0: D:\ORACLE\ORADATA\PRODMSDS\REDO05.LOG
Mon Oct 18 07:05:02 2010
Thread 1 advanced to log sequence 24431 (LGWR switch)
  Current log# 3 seq# 24431 mem# 0: D:\ORACLE\ORADATA\PRODMSDS\REDO03.LOG
Mon Oct 18 07:15:09 2010
ORA-00060: Deadlock detected. More info in file c:\oracle\product\10g\10.2.0.4.0\seo\admin\prodmsds\udump\prodmsds_ora_1812.trc.
Mon Oct 18 07:26:55 2010

I want an alarm to be triggered whenever "ORA-" shows up in the log.

I would appreciate any hints to steer me in the right direction.

Thank you.

 

Verified Answer
  • Hello,

     Sorry Could not attach the images FYR. Follow metioned below  steps

    Step 1 - Select  Log Parser under Monitoring  ->

    Step 2 - Create new Log parser = name(test)  ->   Typoe mentioned below detsils under each  tab

    a)  Parsaer name : test

    b) log  file path =  c:\test\test.txt

    c) Description =  test

    d) Under  Template = Type $message$

    e) Under output teamplate: type  Received the folllowing alarm - $message$

    f) Create Log file parameter = Select  Name=  message, type =  string.

    g) save the configuration.

    Step 3 -  Select Assign Parset sets

    a) select  log parser = test

    b) once selected test  below you see  define parser set  " select this"\

    c) under  define parser set   = select new paraser set

    d) once selected new parser set  you  get new window - parser set defination - type parser set name

     e) edit the  parser set you defined  ( e.g)  OHA

    f) Add the  following details under each tab as mentioned : under ORA ( set) = >  select add [ Passer colum -  selec t" message " operator = select contains , Parameter  filter   : type : ORA-

     

     I hope this should solve your probelm.

    Thanks

    Vijaya Kiran 

     

     

     

All Replies
  • Use the log parcer, works like a charm once set up correctly.

    Monitor > Log Monitoring > Log Parcer

  • Hello,

    Follow  mentioned below screen shots to configure the log parser.

     

     

     

     

     

     

  • Hello,

     Sorry Could not attach the images FYR. Follow metioned below  steps

    Step 1 - Select  Log Parser under Monitoring  ->

    Step 2 - Create new Log parser = name(test)  ->   Typoe mentioned below detsils under each  tab

    a)  Parsaer name : test

    b) log  file path =  c:\test\test.txt

    c) Description =  test

    d) Under  Template = Type $message$

    e) Under output teamplate: type  Received the folllowing alarm - $message$

    f) Create Log file parameter = Select  Name=  message, type =  string.

    g) save the configuration.

    Step 3 -  Select Assign Parset sets

    a) select  log parser = test

    b) once selected test  below you see  define parser set  " select this"\

    c) under  define parser set   = select new paraser set

    d) once selected new parser set  you  get new window - parser set defination - type parser set name

     e) edit the  parser set you defined  ( e.g)  OHA

    f) Add the  following details under each tab as mentioned : under ORA ( set) = >  select add [ Passer colum -  selec t" message " operator = select contains , Parameter  filter   : type : ORA-

     

     I hope this should solve your probelm.

    Thanks

    Vijaya Kiran 

     

     

     

  • Thank you all for your replies, I really appreciate them greatly. I will try it out and let you know.

  • Thank you, I got it working.