I have been having problems with a custom alert created to read Unix log files.

The alert checks for the expression "There is danger of OutOfMemoryError" in the weblogic logfile.  The alert works fine besides the fact that the alert repeats over and over if the expression is anywhere in the logfile.

Is there a way to keep SCOM from constantly alerting on this logfile?  Possibly include some time and date function?

Hello Jacob,

I think you need to use the timestamp to meet the requirement. Please refer to a similar thread here:

Parse Unix Log Entry before raising an alert
http://social.technet.microsoft.com/Forums/en-US/operationsmanagerauthoring/thread/37f5f82e-82c2-4858-9e26-472dcfe4bba4/

Thanks,

Hi Yog,

Looking through those links I did not really see what I was looking for.  The UNIX log is time stamped, and currently the expression we watch for in the log is 'There is danger of OutOfMemoryError' without '' around it.  

Is there a way to only have this alert alert on new instances of 'There is danger of OutOfMemoryError' in the log?

Thanks again!

Jacob

This was accomplished with scom 2012.

• Marked as answer by Jacob Nussbaum 17 hours 49 minutes ago

This was accomplished with scom 2012.

• Marked as answer by Jacob Nussbaum Monday, June 22, 2015 1:20 PM