Unknown Status and Macro with Wildcards

zubler · Post by **zubler** » Tue Oct 20, 2009 12:54 am

Hi there,

We've got a few Problem in some Ping tests with active RMAs. There are up to 20% unknown Status in a ping test from a active RMA to a firewall. Why are there unknown statuses? Is it possible to ignore them and repeat the test automatically if this happens?

Another problem we have is about a compare file test which checks a file for content like "sucessful" this is based on a logfile with a date variables and wildcards. %yyyy%-%mm%-%dd[-1d]%*.log. The files looks like this 2009-10-18-21-00-01. the last three blocks are variable from day to day the rest remains.

Thanks in advance

Zubler

KS-Soft · Post by **KS-Soft** » Tue Oct 20, 2009 10:38 am

We've got a few Problem in some Ping tests with active RMAs. There are up to 20% unknown Status in a ping test from a active RMA to a firewall. Why are there unknown statuses?

What exactly is test status? Unknown or Unknown host?
Do you see error message in Reply field of the test? What exactly message?

Is it possible to ignore them and repeat the test automatically if this happens?

You may disable "Treat Unknown status as Bad" test property.
Also you may add "advanced mode" "Repeat test" action into alert profile assigned to the test. You may use expression like ('%Status%'=='Unknown') and (%Recurrences%==1)

Another problem we have is about a compare file test which checks a file for content like "sucessful" this is based on a logfile with a date variables and wildcards. %yyyy%-%mm%-%dd[-1d]%*.log. The files looks like this 2009-10-18-21-00-01. the last three blocks are variable from day to day the rest remains.

1) I think you are using wrong expresion. If you want to apply date stamp using yesterday date, use expression like %yyyy-mm-dd[-1d]%
2) Solution depends on version of HostMonitor. If you are using HostMonitor version 8.06+, you may use the following variables:
%NewestFile%, %OldestFile%

Regards
Alex

zubler · Post by **zubler** » Wed Oct 21, 2009 12:17 am

Thanks for your help.

Test status is Uknown with the reply RMA not connected. But If I do a manual refresh everything is ok. This happens with agents in the internet and local here in the LAN. Is this simply the unstable network?

I will try these setting, may this can tune our results.

I will try these expression. I know the %NewestFile% macro, but my if the logfile isn't created, this test will not fail, although it should.

Best regards

Zubler

KS-Soft · Post by **KS-Soft** » Wed Oct 21, 2009 12:53 pm

Test status is Uknown with the reply RMA not connected. But If I do a manual refresh everything is ok. This happens with agents in the internet and local here in the LAN. Is this simply the unstable network?

May be... could you check "successful audit" and "failure audit" RMA log files? Any errors?

I will try these expression. I know the %NewestFile% macro, but my if the logfile isn't created, this test will not fail, although it should.

So you have many files in the folder and you need to check file with unknown name that can be presented or not? Sorry, we do not have solution for you.
Unless you can use move "old" files to another folder after each check.

Regards
Alex

zubler · Post by **zubler** » Thu Oct 22, 2009 12:45 am

Following a Log of a intern RMA:

[29.09.2009 07:49] Z&P_applsrv01 Connection error
[29.09.2009 08:26] Z&P_applsrv01 Decode error: Cannot read data
[29.09.2009 08:26] Z&P_applsrv01 Connection error
[29.09.2009 08:27] Z&P_applsrv01 Connection error
[13.10.2009 08:30] Z&P_applsrv01 Decode error: Cannot read data
[22.10.2009 08:38] Z&P_applsrv01 Agent "Z&P_applsrv01" already

Are there any other settings or ports to make except open port 5056?

No, not exactly. we have a tool whic writes logfile once a day with the actual date and a random time in it. One each day. So if I use %NewestFile% I will check alway the newest File in the folder. But if the tool fails and don't create that file today I still check yesterdays file. The possibility with the macro doesnt work with a "*" for the time part of File name. Like this: %yyyy-mm-dd[-1d]%*

regards

zubler

KS-Soft · Post by **KS-Soft** » Thu Oct 22, 2009 6:20 pm

Are there any other settings or ports to make except open port 5056?

No, agent requires just 1 open port.
Looks like sometimes connection drops unexpectedly...

No, not exactly. we have a tool whic writes logfile once a day with the actual date and a random time in it. One each day. So if I use %NewestFile% I will check alway the newest File in the folder. But if the tool fails and don't create that file today I still check yesterdays file.

Yes, I understand this. That why I said "Sorry, we do not have solution for you. Unless you can use move "old" files to another folder after each check."
Can you move these "old" log files to another folder after each check? Simple .BAT file started by HostMonitor can do that...

Regards
Alex