I have built a text log, repeated event detection monitor to alert if 3 instances of "OracleException" are encountered in logs within a 5 minute period. The two issues I am seeing are:
1)The monitor alerts based on the same three instances every 15-20 minutes, without any new occurances being added to the log file. I was under the assumption MSCOM picked up where it left off with the log file, and would only alert on any new occurances of the text string.
2)I've added the following in the alert description but its not displayed in the alert message. This should be the correct format for a log monitor.
Logfile Directory: $Data/Context/LogfileDirectory$ Logfile Name: $Data/Context/LogfileName$ String: $Data/Context/Params/Param[1]$
Any help appreciated.
Have a look at the XML Cheat Sheet for OpsMgr and SCE. I believe we have the correct XPath presented in there. Here's a link to the download.
XML Cheat Sheet for OpsMgr and SCE
Will you attach your MP XML for me to look at? Will look into this in the lab in a bit to see if I can duplicate the error or find error in MP configuration.
Thanks for the help!!