Hi,
The UNIX/Linux log file monitor cannot handle wildcards. The log file name must be fixed, that is, we can only monitor a single file. Do we monitor multiple files, if so, it may not work.
The monitors created from out-of-box template have the following limitations and we may check if all the conditions are met.
It only works well with certain behavior of the log file
It only works with one log file
It doesn't actually suppress alerts corresponding to entries logged during maintenance mode; the alerts come anyhow soon after maintenance window ends
Alex
If the response is helpful, please click "Accept Answer" and upvote it.