Hello everybody,
I created a monitor and a rule for my Windows Computers which checks logfiles for containing the word "brack".
But even if the file contains this word, the monitor does not raise an alert.
- The targetting is right (we tested for Windows Computers and our own group aswell)
- Directory is right (we tried different directories aswell)
- Filename/wildcard is right (*.log)
- First expression is "Params/Param[1] contains brack"
- Second expression is "Params/Param[1] contains everythingok"
- First event raised sets healthstate critical
- Generate an alert is on
- Yes, we do have administration-rights
For testing, we even created a logfile with only one word - brack.
Still no alert.
Thanks for your help!
Edit:
In the HealtExplorer it claims the second event is raised, but this is completely unpossible since there is only one word -brack- in the logfile