How to Set Multiline Ignore Key on FKM
Primarily, you will need to use the Multi line functionality of FKM, where the idea is that the FKM key, be it FAIL or Warning, is composed of multiple lines tagged by Start pattern and End pattern, in conjunction with the Ignore Key.
Here’s how. Suppose you have a text file composed of the following lines:
Using the basic setup with ERROR as your FAIL key, plus the Multiple Trigger mode setting configured:
This would yield the following FKM dataview:
As there are multiple lines with ERROR, and you require that the FAIL key will be a composition of ERROR messages and of MISTAKE message to form a single FAIL key, you will have to perform the following:
The resulting FKM dataview would now look like:
At this point, you can now set your FKM Ignore Key. In this case, we will set it so that 4 lines of ERROR messages followed by a line of MISTAKE message will be IGNORED. Using REGEX string ^(ERROR\n){4}MISTAKE will sort the dataview required.
The resulting dataview would now become the following, where 2 lines from the previous dataview were taken out as it satisfied the IGNORE KEY condition of 4 lines of ERROR messages followed by a line of MISTAKE message.
