OMW Support Tip: How to monitor several log files with the same logfile policy
A single logfile policy may run against multiple log files. The Source tab of the logfile policy editor enables you to specify which log file the policy reads, but it is not as simple as just placing the file names one after the other when you want to monitor several log files.
To specify the log file that the policy reads, type the drive letter and the full path for the location of this log file on the appropriate managed node. You can use Windows environmental variables as the source log file (for example winnt or clusterlog) to make your policies more flexible. The proper syntax for these variables is:
To specify one or more file names of logs to be monitored, you can use a command to return the name(s). In that case, you would place the source as <`command`>, where you may enter a command directly or call a script that will perform the required actions to determine the logfile names you want to monitor and return them to the policy.
In Windows, for example, you could use something like:
<`cmd /c dir /b /s C:\file*.log`>
and this would return all log files in C:\ that start with “file” and have the extension “.log”. The command will return all the files that match the criteria separated by spaces. The HP Operations agent will monitor each of the files using the same options and conditions as configured for this policy.
The Online Help contains more information regarding this under the topic “Configure log file source properties”.
If you find this or any post resolves your issue, please make sure to mark it as an "Accepted as Solution".
If you liked the reply then please show this with KUDOs