Back to Geneos FAQ

FKM old or unexpected alerts for log files

Related topics Copied

Old FKM alerts, file read from beginning, trigger on alerts already accepted, FKM alert repeated, FKM trigger repeated, duplicate FKM alerts, duplicate email alerts for FKM file, out of time alerts for FKM file, Repeat FKM alerts

Problems Copied

• Problem 1 - The FKM sampler is reading the file from the beginning, causing the dataview to show a repeat of old triggered keys for the file.
• Problem 2 - The FKM sampler is showing old trigger keys or triggering keys during a time you were not expecting.

Possible causes Copied

• Root Cause 1 - This is covered in the Geneos - FKM reading file from the beginning Troubleshooting Guide.
• Root Cause 2 - If the FKM sampler has an Active time record defined on the sampler level (under the sampler’s Advanced tab), this causes the FKM’s file pointer to stop monitoring the file when the sampler is inactive. Once the sampler becomes active again, the file pointer will alert on triggers from the point it left off at. Causing the FKM sampler to alert you on triggers between the end time and start time of the active time record.

Possible solutions Copied

• Solution Root Cause 1- This is covered in our Geneos - FKM reading file from the beginning Troubleshooting Guide.
• Solution 1 to Root Cause 2 - Instead of defining the active time record on the sampler level, set the active time on the file entry itself. Setting the active time on the file level avoids the FKM sampler’s file pointer from detecting file triggers during the inactive time period, and displaying them once the active time on the file entry becomes active. Screenshot below for reference.

• Solution 2 to Root Cause 2 - As an alternative to defining an active time record on each file, you can set an active time to apply to all the files with the Default file active time setting that is found in the Advanced tab at the bottom of the FKM sampler.

Related articles Copied

• File Keyword Monitor (FKM) Configuration Guide
• File Keyword Monitor (FKM) User Guide
• Duplicate or out of time email alerts
• Geneos - FKM reading file from the beginning