Searching Discovery Pattern Log Contents
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-13-2024 10:40 AM
I configured a pattern extension which uses a match statement to trigger an expected termination with a specific log message. I want to locate all discovery targets within a certain time window that have generated this log message.
The string does not appear in the Discovery Home error UI. I can find the string in the Discovery Pattern Log if I locate a specific IP address record and review its Log Message field or click on the View Log link. While it proves the string is where I expect it to be, this approach doesn't scale across the enterprise.
When I try to use the filter on the Discovery Pattern Log list view to search for any part of that string, searching simply fails to return anything. I suspect it's because the Log Message field is a compressed type and doesn't accept normal search criteria. I tried the URL hack, and it didn't seem to work either.
Is there a trick to searching Discovery Pattern Logs for a specific string match without writing scripts?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-13-2024 12:01 PM
Hi @Christopher Hub ,
Please refer to below article:
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0832844
Mark my answer correct & Helpful, if Applicable.
Thanks & Regards,
Sumanth Meda
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-13-2024 12:06 PM
I don't see any relevance between this article and my question... I need to search across all pattern logs in a time frame on the sa_pattern_log table. The logs view on that article's solution is no different than what I have now except it is pre-filtered for a pattern. I still can't search for a string with the logs using that approach.