Idea ID 2692662
In Sitescope log file monitor, when searching for several error messages separated with "OR" in the content match expression the monitor shows matched value labels only for the last error found. Monitor should be showing data in "matched value labels" for any error found from the list in "content match expression".
Content match field example
/(Cluster is not quorate)|(NIC.*Link is Down)|(The token was lost in the OPERATIONAL state)|(Quorum Dissolved)|(quorum lost)|(SCSI device reset)|(ntpd.*error.*PPM)|(read-only)/i
Match value labels
When there are 3 different errors matched during monitor run , the monitor is showing that there are 3 matches but for the matched labels it shows only one of the errors text , the one that came the last.
If there are 3 matches, it should be showing the 3 labels that matched. It should be possible to see on the dashboards which errors were found in the log.
Found in SIS v11.41 and v11.51 on Linux.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.