RegEx to exclude login probe activity – SQL Diagnostic Manager for SQL Server – Performance Monitoring & Tuning
I also want to exclude alert like that. Idera SQL error log alert configuration permits this with regex but I do not know how can I write the syntax. There is no example in documentation. For example should I use regex like that: not like ‘Logon SSPI Handshake%’
The message are shown below in context (if applicable):
Critical 02.11.2022 09:08:56 Logon Error: 17806, Severity: 20, State: 14.
OK 02.11.2022 09:08:56 Logon SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. The logon attempt failed
Read more here: Source link