{"action":"created","issue":{"url":"https://api.github.com/repos/mickem/nscp/issues/198","labels_url":"https://api.github.com/repos/mickem/nscp/issues/198/labels{/name}","comments_url":"https://api.github.com/repos/mickem/nscp/issues/198/comments","events_url":"https://api.github.com/repos/mickem/nscp/issues/198/events","html_url":"https://github.com/mickem/nscp/issues/198","id":115898930,"number":198,"title":"Real-time logfile monitoring","user":{"login":"willemdh","id":6462991,"avatar_url":"https://avatars.githubusercontent.com/u/6462991?v=3","gravatar_id":"","url":"https://api.github.com/users/willemdh","html_url":"https://github.com/willemdh","followers_url":"https://api.github.com/users/willemdh/followers","following_url":"https://api.github.com/users/willemdh/following{/other_user}","gists_url":"https://api.github.com/users/willemdh/gists{/gist_id}","starred_url":"https://api.github.com/users/willemdh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/willemdh/subscriptions","organizations_url":"https://api.github.com/users/willemdh/orgs","repos_url":"https://api.github.com/users/willemdh/repos","events_url":"https://api.github.com/users/willemdh/events{/privacy}","received_events_url":"https://api.github.com/users/willemdh/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mickem/nscp/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"mickem","id":1434697,"avatar_url":"https://avatars.githubusercontent.com/u/1434697?v=3","gravatar_id":"","url":"https://api.github.com/users/mickem","html_url":"https://github.com/mickem","followers_url":"https://api.github.com/users/mickem/followers","following_url":"https://api.github.com/users/mickem/following{/other_user}","gists_url":"https://api.github.com/users/mickem/gists{/gist_id}","starred_url":"https://api.github.com/users/mickem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mickem/subscriptions","organizations_url":"https://api.github.com/users/mickem/orgs","repos_url":"https://api.github.com/users/mickem/repos","events_url":"https://api.github.com/users/mickem/events{/privacy}","received_events_url":"https://api.github.com/users/mickem/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/mickem/nscp/milestones/4","html_url":"https://github.com/mickem/nscp/milestones/0.5.0","labels_url":"https://api.github.com/repos/mickem/nscp/milestones/4/labels","id":1400278,"number":4,"title":"0.5.0","description":null,"creator":{"login":"mickem","id":1434697,"avatar_url":"https://avatars.githubusercontent.com/u/1434697?v=3","gravatar_id":"","url":"https://api.github.com/users/mickem","html_url":"https://github.com/mickem","followers_url":"https://api.github.com/users/mickem/followers","following_url":"https://api.github.com/users/mickem/following{/other_user}","gists_url":"https://api.github.com/users/mickem/gists{/gist_id}","starred_url":"https://api.github.com/users/mickem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mickem/subscriptions","organizations_url":"https://api.github.com/users/mickem/orgs","repos_url":"https://api.github.com/users/mickem/repos","events_url":"https://api.github.com/users/mickem/events{/privacy}","received_events_url":"https://api.github.com/users/mickem/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":1,"state":"open","created_at":"2015-11-08T19:15:07Z","updated_at":"2015-11-16T09:04:36Z","due_on":null,"closed_at":null},"comments":7,"created_at":"2015-11-09T15:23:19Z","updated_at":"2015-11-19T09:00:22Z","closed_at":null,"body":"Hello,\r\nIs there a way to not use a separator or split in a real-time logfile check\r\n```\r\n[/settings/logfile/real-time/checks/LOG_DrosoService]\r\nfile = M:\\ApplicationLogs\\DrosoService\\log.txt\r\ndestination = NSCA,FILE\r\nfilter = column4 like 'INFO'\r\ncritical = column4 like 'INFO'\r\ncolumn separator=;\r\n```\r\nI have some logfiles with variable structured data and would like to just \r\n- check if the last log line contains string x\r\n- if so send to NSCA\r\n\r\nTried omitting column separator but that doesn't work. Also notices that a space as separtor also doesn't work.\r\n\r\nAny tips to achive the above?"},"comment":{"url":"https://api.github.com/repos/mickem/nscp/issues/comments/157993964","html_url":"https://github.com/mickem/nscp/issues/198#issuecomment-157993964","issue_url":"https://api.github.com/repos/mickem/nscp/issues/198","id":157993964,"user":{"login":"willemdh","id":6462991,"avatar_url":"https://avatars.githubusercontent.com/u/6462991?v=3","gravatar_id":"","url":"https://api.github.com/users/willemdh","html_url":"https://github.com/willemdh","followers_url":"https://api.github.com/users/willemdh/followers","following_url":"https://api.github.com/users/willemdh/following{/other_user}","gists_url":"https://api.github.com/users/willemdh/gists{/gist_id}","starred_url":"https://api.github.com/users/willemdh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/willemdh/subscriptions","organizations_url":"https://api.github.com/users/willemdh/orgs","repos_url":"https://api.github.com/users/willemdh/repos","events_url":"https://api.github.com/users/willemdh/events{/privacy}","received_events_url":"https://api.github.com/users/willemdh/received_events","type":"User","site_admin":false},"created_at":"2015-11-19T09:00:22Z","updated_at":"2015-11-19T09:00:22Z","body":"Michael,\r\n\r\nI have tried to get this working on the latest stable release 0.4.4.12 as wel as 0.4.1.105, but have not been able to get it working. It doesn't even seem to notice any changes on 0.4.4.12..\r\n\r\nMy C:\\Logtest.txt looks like this:\r\n```\r\nINFO;text \r\nINFO;text \r\nWARNING;text \r\nINFO;text \r\nINFO;text \r\n```\r\nAnd i'm populating it with\r\n```\r\necho INFO;text >> C:\\Logtest.txt\r\necho WARNING;text >> C:\\Logtest.txt\r\n```\r\nThese are the relevant parts of the nsclient.ini on 0.4.4.12:\r\n```\r\n[/modules]\r\nCheckDisk = 1\r\nCheckEventLog = 1\r\nCheckExternalScripts = 1\r\nCheckHelpers = 1\r\nCheckLogFile = 1\r\nCheckNSCP = 1\r\nCheckSystem = 1\r\nCheckTaskSched = 0\r\nCheckWMI = 1\r\nCommandClient = 0\r\nDotnetPlugins = 0\r\nGraphiteClient = 0\r\nNRDPClient = 0\r\nNRPEClient = 0\r\nNRPEServer = 1\r\nNSCAClient = 1\r\nNSCAServer = 0\r\nNSClientServer = 1\r\nPythonScript = 0\r\nScheduler = 0\r\nSimpleCache = 0\r\nSimpleFileWriter = 0\r\nSMTPClient = 0\r\nSyslogClient = 0\r\nWEBServer = 0\r\n\r\n[/settings/logfile]\r\n\r\n[/settings/logfile/real-time]\r\nenabled = 1\r\n\r\n[/settings/logfile/real-time/checks]\r\n\r\n[/settings/logfile/real-time/checks/LOG_Test1]\r\nfile = C:\\Logtest.txt\r\ndestination = NSCA,FILE\r\nfilter = line like 'WARNING'\r\ncritical = line like 'WARNING'\r\n\r\n[/settings/logfile/real-time/checks/LOG_Test2]\r\nfile = C:\\Logtest.txt\r\ndestination = NSCA,FILE\r\nfilter = column1 like 'WARNING'\r\ncritical = column1 like 'WARNING'\r\ncolumn split=;\r\n```\r\nAs you can see I tested with line and column but neither seem to be working on 0.4.4.12.\r\nOn 0.4.1.105 I do get it working, but only when I'm using the 'column separator=;' not with line.\r\n\r\nLet me know if you notice anything missing in my config. I have been searching through your documentation at examples but couldn't find any.\r\n\r\n"}}