- 0 minutes to read

Troubleshooting & FAQ: Log File Parser Monitoring Agent

Find quick solutions and answers for the Nodinite Log File Parser Monitoring Agent. Jump to your specific issue using the navigation guide below.

Find Your Solution

graph TD A["🔧 What's your issue?"] --> B["📁 File Access Problems"] A --> C["🔍 Pattern Not Matching"] A --> D["⚡ Performance Issues"] A --> E["🔗 Correlation Not Working"] A --> F["⚠️ Too Many Alerts"] B --> B1["📂 File Access & Permissions"] C --> C1["🎯 Pattern Matching & RegEx"] D --> D1["⚡ Performance & Optimization"] E --> E1["🔗 ACK/NAK Correlation"] F --> F1["🔇 Alert Management"] classDef problemStyle fill:#ffebee,stroke:#c62828,stroke-width:2px classDef solutionStyle fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px class A problemStyle class B,C,D,E,F problemStyle class B1,C1,D1,E1,F1 solutionStyle

Click any section below or use the quick links:

Issue Type Quick Solutions
📁 File Access & Permissions Can't access files, SMB share issues, permission problems
🎯 Pattern Matching & RegEx Patterns not working, RegEx syntax, timestamp issues
⚡ Performance & Optimization High CPU, memory usage, large file handling
🔗 ACK/NAK Correlation Transaction tracking not working, timeout issues
🔇 Alert Management Too many alerts, false positives, notification issues

What access rights are required?

The account used to run the Nodinite Log File Parser Monitoring Agent as a Windows Service must have read access to the folder(s) with log files. This is detailed in the Prerequisites for Log File Parser Monitoring Agent user guide.

Note

Please review the Logon as Service Right user guide.

File Access & Permissions

flowchart TD A["🗂️ File Access Issue"] --> B{"📍 File Location?"} B -->|Local Windows| C["✅ Check Permissions"] B -->|SMB Share| D["🌐 Check Network Access"] C --> E["🔐 Service Account Rights"] D --> F["🔑 SMB Credentials"] E --> G["✅ Read Permissions on Files"] F --> G classDef issueStyle fill:#ffebee,stroke:#c62828 classDef checkStyle fill:#fff3e0,stroke:#f57c00 classDef fixStyle fill:#e8f5e8,stroke:#2e7d32 class A issueStyle class B,C,D checkStyle class E,F,G fixStyle

Where can log files be located?

Supported locations:

  • Windows folders: C:\Logs\*.log (local paths)
  • SMB shares: \\server\share\logs\*.log (network paths)

Not supported: NFS, FTP, cloud storage (submit feature request to Support)

Common permission issues

Problem Solution
"Access denied" Service account needs Read permissions on log files and folders
"Path not found" Verify UNC path format: \\server\share\folder
SMB timeout Check network connectivity, firewall rules

Pattern Matching & RegEx

flowchart LR A["🎯 Pattern Not Matching"] --> B{"🔍 Check RegEx"} B -->|Invalid| C["✏️ Fix RegEx Syntax"] B -->|Valid| D{"📄 Check Log Format"} D -->|Wrong Format| E["🔧 Update Pattern"] D -->|Correct| F["⏰ Check Timing"] C --> G["✅ Pattern Working"] E --> G F --> G classDef issueStyle fill:#ffebee,stroke:#c62828 classDef checkStyle fill:#fff3e0,stroke:#f57c00 classDef fixStyle fill:#e8f5e8,stroke:#2e7d32 class A issueStyle class B,D,F checkStyle class C,E,G fixStyle

Common RegEx patterns

Use Case Pattern Example Match
Errors ERROR\|EXCEPTION\|FATAL ERROR: Database timeout
HTTP Errors 5\d\d 500, 503, 504
Capture Groups OrderId:(\d+) OrderId:12345 (captures 12345)
Negative Lookahead ERROR(?!.*retry) ERROR but not "ERROR retry"

Why patterns don't match

  • Case sensitivity: Use (?i)error for case-insensitive
  • Special characters: Escape . * + ? with backslash
  • Timestamp format mismatch: Verify log datetime format
  • File encoding: Ensure UTF-8 or ASCII encoding

Performance & Optimization

flowchart TD A["⚡ Performance Issue"] --> B{"📊 What's slow?"} B -->|High CPU| C["🔄 Reduce Scan Frequency"] B -->|High Memory| D["📁 Limit File Size"] B -->|Slow Alerts| E["🎯 Optimize Patterns"] C --> F["✅ Optimized"] D --> F E --> F classDef issueStyle fill:#ffebee,stroke:#c62828 classDef checkStyle fill:#fff3e0,stroke:#f57c00 classDef fixStyle fill:#e8f5e8,stroke:#2e7d32 class A issueStyle class B checkStyle class C,D,E,F fixStyle

Performance guidelines

Metric Recommended Tuning
Files per agent <200 files Split across multiple agents
File size <500 MB Use log rotation
Scan interval 30-60 seconds Increase for non-critical logs
Memory usage <100 MB Avoid large regex patterns
sequenceDiagram participant L as 📄 Log File participant A as 🤖 Agent participant N as 🎯 Nodinite L->>A: OrderReceived OrderId:12345 A->>N: ⏱️ Start tracking Note over A: Waiting for completion... L->>A: OrderCompleted OrderId:12345 A->>N: ✅ Transaction complete L->>A: PaymentStarted PayId:67890 A->>N: ⏱️ Start tracking payment Note over A: ⏰ Timeout after 5 minutes A->>N: ❌ Alert: Incomplete transaction

Quick setup

Example configuration:

  • Start pattern: OrderReceived.*OrderId:(\d+)
  • End pattern: OrderCompleted.*OrderId:$1
  • Timeout: 30 minutes

Complete guide: How to monitor correlated events

Alert Management

flowchart TD A["🔔 Too Many Alerts"] --> B{"📊 What type?"} B -->|🚫 False Positives| C["Add Negative Patterns"] B -->|⏰ Too Frequent| D["Increase Thresholds"] B -->|👥 Wrong People| E["Fix Notification Rules"] C --> F["✅ Focused Alerts"] D --> F E --> F classDef problem fill:#ffebee,stroke:#c62828 classDef check fill:#fff3e0,stroke:#f57c00 classDef solution fill:#e8f5e8,stroke:#2e7d32 class A problem class B check class C,D,E,F solution

Common fixes

Problem Solution Example
Known errors Add negative pattern ERROR(?!.*retry successful)
Too many warnings Monitor only critical Filter: ERROR, FATAL only
Maintenance noise Schedule suppression Disable alerts during deployments

Result: 70-90% reduction in false positives.

Implementation Examples

Use Case Guide Description
🔗 Transaction tracking How to monitor correlated events ACK/NAK monitoring for business workflows
📄 Error detection How to monitor file content Pattern matching for errors and security events
🌐 IIS monitoring How to monitor IIS W3SVC log files Web server performance and error monitoring
🐛 System diagnostics How to monitor Nodinite Diagnostic files Platform health and troubleshooting

Need More Help?

Quick resources:

Next Step

Configuration
Prerequisites for Log File Parser Monitoring Agent
Log File Parser Monitoring Agent