Logfile Monitoring & Trigger Comments

[mbrand5371]

I've configured the following Item:

Description		LSKN_Values_/var/log/lskn/lskn_procmon.log
Type			ZABBIX agent (active)
Key			log[/var/log/lskn/lskn_procmon.log]
Type of information	Log

And Trigger:

Name		LSKN_Values_/var/log/lskn/lskn_procmon.log_ALERT
Expression	{LSKN_Template_procmon:log[/var/log/lskn/lskn_procmon.log].str(alert)}=1

The logfile entry looks like:

Wed Oct 28 11:40:05 CET 2009 alert: Prozess: /usr/sbin/sshd der Applikation: sshd-Daemon gestoert. Bitte folgendes Team benachrichtigen: LSKN-Unix-Nivadis

I try give me an event, if the word "alert" is found in the logfile but it does'nt work.
BTW: Is ist posible to get an Trigger "comment" which contains the full logfile entry ?

Regards, Marcus

[richlv]

is the data coming in that item actually ?

[mbrand5371]

We've found the mistake.
Our Zabbix reference Server and Zabbix agentd are running on one system.
In zabbix-agendt.conf we configured the service-ip as zabbix-server.
After setting "localhost" as server active checks would be deployed an performed.

Setting other systems to service-ip will work too