General_AsciiLog knowledge script does not generate expected events (NETIQKB8500)

  • 7708500
  • 02-Feb-2007
  • 03-Sep-2010

Environment

NetIQ AppManager 6.x
NetIQ AppManager 7.0.1

 

Situation

General_AsciiLog knowledge script does not generate expected events.

Resolution

In the first interval, the General_AsciiLog knowledge script reads the file and inserts a marker at the end of the file. (Note that the knowledge script does not search for a specified search string during the first interval.) In subsequent intervals, the script checks the file for changes that match the search string specified in the job properties. The knowledge script raises an Event if the number of lines matching the search criteria exceeds the threshold set.

If you are running this job as a "Run Once" job to test it out, it will never generate an Event, because it never checks for search strings on the first iteration.  In order to test the Script and your search string, you would want to run the job for at least two iterations.  Note that an entry matching the search string criteria would need to be inserted into the log between the first and second iteration, in order for the script to see it and generate an Event for it.  Matching entries that pre-existed the first iteration of the job will not be seen during the search performed on the second iteration.

Additional Information

Formerly known as NETIQKB8500

For further information about the General_AsciiLog knowledge script, refer to the F1 Help File (select the knowledge script in the KS Pane and press F1).