Active check on logs report fifferent values depending on Operator

[syn4ps]

Hello everyone,

I was new to Zabbix one month ago so I am still learning. And still have problems.

I have created 2 items (active checks) which look for invalid connection attempts via ssh:
item one: log.count[/var/log/auth.log,: Invalid user ]
item two: log.count[/var/log/auth.log,:...

[Antonio Filho]

Hi everyone,

I've been working pretty hard setting up my monitoring enviroment focused on Exchange Server 2016 service / system health status.

Now, almost done but I would really like to to know from anyone if is possible to display on Zabbix a log file (on .xml, .csv, .json,etc.)...

[FloBer]

Hi,

I would like to send my Zabbix server logs in syslog format to my ELK server.
Does someone know how to do that and can help me? I didn't find the option in the documentation and in the menus.

Thank you

[VladM]

I am using zabbix_server (Zabbix) 3.0.8 I have the following zabbix item:

item = log[/path/to/file.log,"Processing file"]

I also configured this item to be able to "read" log timestamp [with "log time format"="yyyypMMpddphh:mm:sspppp"]...

[0226]

Regarding LOG Monitoring. I want a trigger to be active only if a error occurred "5 times in a log file in last 2 minutes". this was done using below trigger.
"{Zabbix server:log["/opt/test.log","error text"].count(120,5)}=0"
but question is if...

[nilsertv]

Hello,

Please I need your help!

I've created an item with the following:

Server: Zabbix 2.4
Monitored: Windows Server 2008 R2

Item:
type: Zabbix agent (active)
key: logrt["K:\Impact360\Data\Logs\integrationservice\integra tionservice_[0-9]+_[0-9]+_[0-9]+_[0-9]+","Str<0>...

[pushpendra.singh]

Hello All ,

I have set the log monitoring whenever there is a ERROR found in the log file but now i can see there is every second ERROR logs are generated and i am getting huge number of alerts . Can you please let me know how to ignore repetitive ERROR messages in zabbix trigger. my configuration...

[lamonta9]

Hello,
I created an item (because the MYSQL template do not handle logs) to extrapolate errors from the MYSQL log.

The key used is:
log [/var/log/mysqld.log, "error", "UTF-8", 100]

Unfortunately I do not extract anything from the log....

[lamonta9]

Salve,
ho creato un item (poiché il template di MYSQL che ho non gestisce i log) per estrapolare gli errori dal log di MYSQL.

La key utilizzata è:
log[/var/log/mysqld.log,"error","UTF-8",100]

Purtroppo non mi estrae nulla dal log....

[acaputto]

I am monitoring a log from IIS, the item is defined like this:

logrt["C:\inetpub\logs\LogFiles\W3SVC1\.*log$",,,,,]

and the result is like :

2016-05-19 16:11:51 X.X.X.X GET /coretest/viewpersona.aspx 149453, 80 dom\usuario 100.0.1.128 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/50.0.2661.102+Safari/537.36...

[zqx]

在zabbix 3.0中添加了vcenter后读到了vm信息，在我删除vcenter相关信息后，server的日志中 还是会持续虚机的相关报警。

17995:20160414:152534.786 cannot send list of active checks to "10.2.3.4": host [A] not found
17995:20160414:152535.339 cannot send list of active checks to "10.4.4.4": host [B] not found...

[moses.moore]

I've had events and triggers go off, but just minutes later they vanish from the web interface.

e.g.: a machine has low memory, a trigger goes off and sends a message. It is resolved, and an hour later when I have time to investigate I check zabbix web interface for the problem.
...

[balgaly]

hey guys and gals,

i'll start from the top.
i have a SQL query that counts number of actions (for example, phones that have been sold) in the last hour, devided by minutes.

the query runs once a hour for the hour that passed and looks like this:
20140911220000,12...

[sevpay]

OS - RHEL 6.4
Zabbix Server and Agent version - 2.2.3

Is it possible to have Zabbix log a trigger status change to a flat file?

I know that I can capture these from the web interface, but it would be nice to be able to see the events from the command line if I am...

[romanrsr]

Hello friends, first of all sorry for my poor English.
I have an item set as follows:
logrt["/var/log/file_.*.log","error"]

And a trigger like this:
{srv-prb:logrt[/var/log/test_.*.log,"error"].nodata(30)}=0

The problem I have...