Thanks for taking time out to see it.
I'm in trouble for setting LOG Items & Trriger. If you know the answer,would you give me your brain!?
【Trouble】
When zabbix agent find the log which has a lot of trriger key('error') at the same time, I want to receive the E-mail at once or get summery mail.
Now , I'm setting the following configulation. However I receieve a number of the log line be written "error". No wonder that is usual Action but I don't need so much reports. I'm happy to get only one E-mail at that time.
If this problem will be resolved by your idea ,please teach me it.
**Item
logrt[/var/log/zabbix.log,error,UTF-8,5]
Type of information Log
Update interval (in sec) 10
**Trriger
{hostname:logrt[/var/log/zabbix.log,"error",UTF-8,5].regexp(error)})#0)
**Action
Trigger severity >= "High"
Send only to E-mail
**/var/log/zabbix.log
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
Due to that setting,I must receive 10 E-mails. There is a lisk for high load CPU by sendding E-mail,if the process is logging a lot of comment "error".
I'm seeking the best solution.
Thanks!!
I'm in trouble for setting LOG Items & Trriger. If you know the answer,would you give me your brain!?
【Trouble】
When zabbix agent find the log which has a lot of trriger key('error') at the same time, I want to receive the E-mail at once or get summery mail.
Now , I'm setting the following configulation. However I receieve a number of the log line be written "error". No wonder that is usual Action but I don't need so much reports. I'm happy to get only one E-mail at that time.
If this problem will be resolved by your idea ,please teach me it.
**Item
logrt[/var/log/zabbix.log,error,UTF-8,5]
Type of information Log
Update interval (in sec) 10
**Trriger
{hostname:logrt[/var/log/zabbix.log,"error",UTF-8,5].regexp(error)})#0)
**Action
Trigger severity >= "High"
Send only to E-mail
**/var/log/zabbix.log
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
[error] hogehoge
Due to that setting,I must receive 10 E-mails. There is a lisk for high load CPU by sendding E-mail,if the process is logging a lot of comment "error".
I'm seeking the best solution.
Thanks!!