I have a need to monitor a logfile for a particular event and alert when detected, it would also be preferable to take action i.e. restart service and notify third party via email, hence perusing monitoring and alerting with IEM.
I can use a regular expression to identify the event and this works for a static filename however the log file I want to test is a rolling log and gets a date appended to its name. i.e. "C:\Program Files (x86)\log file path with spaces\logfile.log2019-02-06.txt"
Is it possible to use a partial file name with a wild card (or substitute characters as it's fixed length), bearing in mind there are also spaces in the pathname so would need to be enclosed in quotes?