Hello,

I am currently working with LogViewPlus and getting to know the program.

I have a use case and do not know whether it can be mapped with LogViewPlus:
I want to monitor Microsoft SMTP logfiles and if a certain log entry does NOT show up within a certain period of time there should be an alert.

Is this possible?

Thank you!

Hi,

Thanks for taking the time to evaluate LogViewPlus.

Yes - LogViewPlus should be able to do this through a Negative Notification.  You can see how to configure a positive notification in our documentation. If you have any questions or issues, please let me know.

Hope that helps,

Toby

Hi Toby,

unfortunately, this does not work.

As a test, I set up a notify like in the video and that worked. But as soon as I set a corresponding alarm on negative notification, unfortunately nothing happens...

I just ran a quick test and it seems to be working ok.  I tested by running the log generating application under tail and then stopping it.  

I think the issue here is that Negative Events need to be primed.  The first event into the filter signals that monitoring is working and the timer should start.  They are fired when something stops, but if that thing never started how can you tell if it stopped?

Events detected by the filter during log file load will not prime the filter.  A new event is required.

The specific use case is that a certain e-mail or two must be sent every day. I need an alarm if this does not happen.
Of course, various log entries still run in the SMTP protocol because the mailing itself works.

I am trying to monitor that an alarm is triggered if a specific e-mail address does not appear in the log.

Perhaps I did not explain this correctly in the first post

I can add a "do not require initial event" flag to the next version of LogViewPlus:



This will set the event to an initial state of primed, so the activity will fire after the timer expires.  If the file is reloaded, the timer will be reset.

Would that help?

To be honest, I can't say whether that would work. But it certainly sounds good

I don't want to stress you out, but do you know when this function might come?
I'm currently still in the test version and this feature would actually be the deciding factor in whether I would buy or not.

The change is now available in the latest BETA release. 

Hope that helps,

Toby

Thank you!

I'll try the Beta version