Next Topic

Previous Topic

Book Contents

Log File Set Definition

Monitor > Assign Parser Sets

  • Select a log parser from the Select log file parser drop-down list.
  • Then select <New Parser Set> or an existing parser set from the Define log set to match drop-down list. The Log File Set Definition popup window displays.

The Log File Set Definition page defines parser sets. A parser set is a list of conditions that must be matched to create a Log Monitoring record. Each condition combines a parameter, operator and value.

Parser Definitions and Parser Sets

When configuring Log Monitoring it's helpful to distinguish between two kinds of configuration records: parser definitions and parser sets.

A parser definition is used to:

  • Locate the log file being parsed.
  • Select log data based on the log data's format, as specified by a template.
  • Populate parameters with log data values.
  • Optionally format the log entry in Log Monitoring.

A parser set subsequently filters the selected data. Based on the values of populated parameters and the criteria you define, a parser set can generate log monitoring entries and optionally trigger alerts.

Without the filtering performed by the parser set, the KServer database would quickly expand. For example a log file parameter called $FileServerCapacity$ might be repeatedly updated with the latest percentage of free space on a file server. Until the free space is less than 20% you may not need to make a record of it in Log Monitoring, nor trigger an alert based on this threshold. Each parser set applies only to the parser definition it was created to filter. Multiple parser sets can be created for each parser definition. Each parser set can trigger a separate alert on each machine ID it is assigned to.

To Create a New Parser Set

  1. Enter a name for the parser set.
  2. Optionally rename the parser set by entering a new name and click Rename to confirm the change.
  3. Select a log file parameter from the Parser Column drop-down list. Log file parameters are defined using the Log File Parser Definition this parser set is intended to filter.
  4. Select an Operator from the drop-down list. Different data types provide different lists of possible operators.
  5. Enter the value the log file parameter should have in the Log File Filter field to generate a Log Monitoring record.

    Note: Template text patterns are case sensitive.

  6. Click Add to add this parameter/operator/value combination to the list of conditions defined for this parser set.
  7. Click Edit to edit and then Save an existing parameter/operator/value combination.
  8. Click the delete icon to delete an existing parameter/operator/value combination.