Ad Widget

Collapse

About Logrt[](Item) & Trriger

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • shkitayama
    Junior Member
    • Mar 2010
    • 1

    #1

    About Logrt[](Item) & Trriger

    Thanks for taking time out to see it.
    I'm in trouble for setting LOG Items & Trriger. If you know the answer,would you give me your brain!?

    【Trouble】
    When zabbix agent find the log which has a lot of trriger key('error') at the same time, I want to receive the E-mail at once or get summery mail.
    Now , I'm setting the following configulation. However I receieve a number of the log line be written "error". No wonder that is usual Action but I don't need so much reports. I'm happy to get only one E-mail at that time.
    If this problem will be resolved by your idea ,please teach me it.

    **Item
    logrt[/var/log/zabbix.log,error,UTF-8,5]
    Type of information Log
    Update interval (in sec) 10

    **Trriger
    {hostname:logrt[/var/log/zabbix.log,"error",UTF-8,5].regexp(error)})#0)

    **Action
    Trigger severity >= "High"
    Send only to E-mail

    **/var/log/zabbix.log
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge
    [error] hogehoge

    Due to that setting,I must receive 10 E-mails. There is a lisk for high load CPU by sendding E-mail,if the process is logging a lot of comment "error".

    I'm seeking the best solution.
    Thanks!!
Working...