LM Logs - Allow variables in stateful condition
Summary: Justin Lanoue, also known as Justin Lanoue, points out a challenge in using LM Logs for creating alerts. They mention that while IP addresses can be extracted using Regex from logs, creating stateful conditions for each IP is cumbersome. Instead of manually generating alerts for each IP address, they'd prefer a more dynamic solution where generic terms like "##IP## is down" or "##IP## is up" can be used, asking if there is a method to implement such a functionality.
For example.
1.1.1.1 is down
2.2.2.2 is down
1.1.1.1 is up
We are already able to extract, for example, the IP as a property on the log via Regex but what we can't do is create a condition like
Alert: ##IP## is down
Clear ##IP## is up
Instead, we have to create a stateful condition for each one like:
Alert: 1.1.1.1 is down
Clear: 1.1.1.1 is up
Alert: 2.2.2.2 is down
Clear: 2.2.2.2 is up
Because you can't simple just do the below because it's too generic:
Alert: is down
Clear: is up
Otherwise please let me know if this is possible another way.
