Searching Discovery Pattern Log Contents

Christopher Hub
Tera Guru

I configured a pattern extension which uses a match statement to trigger an expected termination with a specific log message.  I want to locate all discovery targets within a certain time window that have generated this log message. 

 

The string does not appear in the Discovery Home error UI. I can find the string in the Discovery Pattern Log if I locate a specific IP address record and review its Log Message field or click on the View Log link.  While it proves the string is where I expect it to be, this approach doesn't scale across the enterprise.

 

When I try to use the filter on the Discovery Pattern Log list view to search for any part of that string, searching simply fails to return anything.  I suspect it's because the Log Message field is a compressed type and doesn't accept normal search criteria.  I tried the URL hack, and it didn't seem to work either.

 

Is there a trick to searching Discovery Pattern Logs for a specific string match without writing scripts?

2 REPLIES 2

Sumanth16
Kilo Patron

Hi @Christopher Hub ,

 

Please refer to below article:

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0832844

Mark my answer correct & Helpful, if Applicable.

 

Thanks & Regards,

Sumanth Meda

 

I don't see any relevance between this article and my question...  I need to search across all pattern logs in a time frame on the sa_pattern_log table. The logs view on that article's solution is no different than what I have now except it is pre-filtered for a pattern.  I still can't search for a string with the logs using that approach.