I am forwarding a logfile to event console. This is working as expected.
Now I want to ignore duplicate messages, because I don’t see the benefit of having x events for the exact same message. The logic would be: If there is already an open event for the host and logfile with the same message then don’t create a new event. If not, create a new event.
Sadly I cannot find an option for this. Is this not possible right now or am I just searching at the wrong place?
(Under Counting & Timing > Expect regular messages there is an option “Merge with open event”, but this seems to work only for the regular message event.)
as a workaround you can use “Counte messages in intervall” in the Event Console.
In this example the Events with the same Message from the same host and logfile (Application) are grouped for one our:
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.
