monitoring /var/log/messages

[faded]

couldn't find this option for zabbix: how can I set zabbix to check files like /var/log/messages and identify errors and other kind of messages?
thanks

[zibbax]

Step 1: chgrp zabbix /var/log/messages
Step 2: Create an item for that host with
Step 3: key = log[/var/log/messages,VALUE]
Step 4: Set VALUE to the string or regexp value you wish to watch for in the log
Step 5: ENJOY!

[faded]

many thanks, zibbax, worked out for me
now, can anyone tell me if there is a way to return in zabbix server the exact log from that file? I mean everytime the error appers, i have to ssh the machine and look manualy trough logs.

[zibbax]

If you view the node group in Monitoring -> Overview you will see the name of the item you made as one of the rows. If you click the tuple (where the row and column for the host meet) for that item/host it will give you the option to view the 500 latest values. This will give you the full strings that match your item key.

[Supriya123]

Hi Faded,

Can you show me? exactly what you specified for trigger? I specified the same thing. But I am not receiving any result.

Here is my item
Type: Zabbix Agent(Active)
Key: log[/var/log/messages,"test_all.pl"]
Type of Information: log
Log time format: yyyyMMdd:hhmmss

Trigger:
servername:log[/var/log/messages,"test_all.pl"].str(test_all.pl)}=0

But I am not seeing any alert coming in , even I see the string in my /var/log/message.

I really appreciate your help