Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Absent Member.
Absent Member.
652 views

How to set collector for daily auto-generated file?

Hi experts,

Sentinel: 7.4.1
Collector: NetIQ Universal Event
Connector: File Connect

Each day there is a new file be automatically generated. For example, today there is catalina.2016-07-20.log and tomorrow there will be a catalina.2016-07-21.log file.

I want Sentinel to crawl only the file of the latest date, but how to make it happen by settings?

Thanks.
0 Likes
1 Reply
Absent Member.
Absent Member.

In the ESM, under the Event Source you can configure a option "Is this a rotating file?" - yes or no.

Then, you can configure a "File Name pattern" like cataline.*.log or you can use Regular expression. For you file example this will be the same; catalina.*.log.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.