Ad Widget

Collapse

Linux Log File Monitoring issue

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Bertrand39100
    Junior Member
    • Feb 2010
    • 27

    #1

    Linux Log File Monitoring issue

    Good morning All,

    Can anyone help me solving my problem about Log File Monitoring ?

    Zabbix Server version : 1.8
    Zabbix Agentd version : 1.8

    Zabbix_Agentd.conf parameters :

    Server=172.17.x.x
    Hostname=adm1.xxx.xxx
    ServerPort=10051
    ListenPort=10050
    StartAgents=3
    DebugLevel=4
    RefreshActiveChecks=120
    MaxLinesPerSecond=100
    EnableRemoteCommands=1
    LogRemoteCommands=1
    LogFileSize=10
    LogFile=/var/log/zabbix_agentd/zabbix_agentd.log
    LogUnresolvedSymbols=/var/log/zabbix_agentd/zabbix_unresolved_symbols.log
    PidFile=/var/run/zabbix_agentd/zabbix_agentd.pid
    Include=/etc/zabbix_agentd/include/

    ZABBIX Hostname GUI = adm1.xxx.priv
    ZABBIX Agentd conf Hostname parameter = adm1.xxx.priv

    I try to make a test with 3 following files (located in /test_logmon/ directory) :

    FILE : "shadow"
    Item : log["/logmon_test/shadow","mail","UTF-8",100]
    Trigger : {ADM1.XXX.XXX:log["/test_logmon/shadow","mail","UTF-8",100].str(mail)}=1
    FILE : "sysctl.conf"
    Item : log["/logmon_test/sysctl.conf","kernel","UTF-8",100]
    Trigger : {ADM1.XXX.XXX:log["/test_logmon/sysctl.conf","kernel","UTF-8",100].str(kernel)}=1
    FILE : "tcsd.conf"
    Item : log["/logmon_test/tcsd.conf","Description","UTF-8",100]
    Trigger : {ADM1.XXX.XXX:log["/test_logmon/tcsd.conf","Description","UTF-8",100].str(Description)}=1

    Linux File permissions :

    -r-------- 1 root root 866 Dec 30 13:02 shadow
    -rw-r--r-- 1 root root 994 Dec 30 13:01 sysctl.conf
    -rw------- 1 root root 6411 Dec 30 13:01 tcsd.conf

    this issue I have is in Zabbix GUI ; I have nothing for those 3 items
    for me everything is good (except 2 file permission on the file shadow and tcsd.conf
    [Cannot open [/test_logmon/shadow] [Permission denied]) on agentd side but nothing is available
    on zabbix Server GUI, the field for the item "sysctl.conf" ; no data are available even if file is correcly analysed.

    Can anyone tell me if it is a problem of Linux file permissions (Zabbix agentd user and group account has been created)
    but I not sure about the exact right I should set to monitor linux file ; I only know that zabbix agentd account
    should have read permission on file to be monitored but I don't how to do corectly that.

    Can any tell the correct file accress permission I should set to all the linux file I would monitor ?
    does "-rw-r--r--" is correct, enough ?

    For the file "sysctl.conf" (read permission) Here below, a content of zabbix agentd log :
    For me, the file "sysctl.conf" is successfully analysed But why in Zabbix GUI I have nothing
    in the field "TEST LOG : SYSCTL.CONF" event if in zabbix_agentd log file,
    for "/test_logmon/sysctl.conf","kernel","UTF-8",100" several items are succesfully found ?

    Here below is the content of zabbix_agentd log file :

    7195:20110104:122213.300 In send_buffer('172.17.X.X','10051')
    7195:20110104:122213.300 Values in the buffer 0 Max 100
    7195:20110104:122213.300 Sleeping for 1 seconds
    7195:20110104:122214.302 In send_buffer('172.17.X.X','10051')
    7195:20110104:122214.302 Values in the buffer 0 Max 100
    7195:20110104:122214.302 refresh_active_checks('172.17.X.X',10051)
    7195:20110104:122214.304 Sending [{
    "request":"active checks",
    "host":"adm1.xxx.xxx"}]
    7195:20110104:122214.305 Before read
    7195:20110104:122214.306 Got [{
    "response":"success",
    "data":[
    {
    "key":"log[\"\/test_logmon\/shadow\",\"mail\",\"UTF-8\",100]",
    "delay":"60",
    "lastlogsize":"0",
    "mtime":"0"},
    {
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "delay":"60",
    "lastlogsize":"0",
    "mtime":"0"},
    {
    "key":"log[\"\/test_logmon\/tcsd.conf\",\"Description\",\"UTF-8\",100]",
    "delay":"60",
    "lastlogsize":"0",
    "mtime":"0"}]}]
    7195:20110104:122214.306 In parse_list_of_checks()
    7195:20110104:122214.307 In disable_all_metrics()
    7195:20110104:122214.307 In add_check('log["/test_logmon/shadow","mail","UTF-8",100]', 60, 0, 0)
    7195:20110104:122214.307 In add_check('log["/test_logmon/sysctl.conf","kernel","UTF-8",100]', 60, 0, 0)
    7195:20110104:122214.307 In add_check('log["/test_logmon/tcsd.conf","Description","UTF-8",100]', 60, 0, 0)
    7195:20110104:122214.307 Sleeping for 1 seconds
    7195:20110104:122215.308 In send_buffer('172.17.X.X','10051')
    7195:20110104:122215.308 Values in the buffer 0 Max 100
    7195:20110104:122215.308 Sleeping for 1 seconds
    7195:20110104:122216.310 In send_buffer('172.17.X.X','10051')
    7195:20110104:122216.310 Values in the buffer 0 Max 100
    7195:20110104:122216.310 Sleeping for 1 seconds
    7195:20110104:122217.312 In send_buffer('172.17.X.X','10051')
    7195:20110104:122217.312 Values in the buffer 0 Max 100
    7195:20110104:122217.312 Sleeping for 1 seconds
    7195:20110104:122218.314 In send_buffer('172.17.X.X','10051')
    7195:20110104:122218.314 Values in the buffer 0 Max 100
    7195:20110104:122218.314 Sleeping for 1 seconds
    7195:20110104:122219.315 In send_buffer('172.17.X.X','10051')
    7195:20110104:122219.315 Values in the buffer 0 Max 100
    7195:20110104:122219.315 Sleeping for 1 seconds
    7195:20110104:122220.317 In send_buffer('172.17.X.X','10051')
    7195:20110104:122220.317 Values in the buffer 0 Max 100
    7195:20110104:122220.317 Sleeping for 1 seconds
    7195:20110104:122221.319 In send_buffer('172.17.X.X','10051')
    7195:20110104:122221.319 Values in the buffer 0 Max 100
    7195:20110104:122221.319 Sleeping for 1 seconds
    7195:20110104:122222.321 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.321 Values in the buffer 0 Max 100
    7195:20110104:122222.321 In process_active_checks('172.17.X.X',10051)
    7195:20110104:122222.321 In process_log() filename:'/test_logmon/shadow' lastlogsize:0
    7195:20110104:122222.321 Cannot open [/test_logmon/shadow] [Permission denied]
    7195:20110104:122222.321 Active check [log["/test_logmon/shadow","mail","UTF-8",100]] is not supported. Disabled.
    7195:20110104:122222.321 In process_value('adm1.xxx.xxx','log["/test_logmon/shadow","mail","UTF-8",100]','ZBX_NOTSUPPORTED')
    7195:20110104:122222.321 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.321 Values in the buffer 0 Max 100
    7195:20110104:122222.321 Buffer: new element 0
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:0
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:53
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:55
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:124
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:159
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:160
    7195:20110104:122222.322 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:192
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:216
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:217
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:254
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:290
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:291
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:322
    7195:20110104:122222.323 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:368
    7195:20110104:122222.324 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:369
    7195:20110104:122222.324 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','# Controls the System Request debugging functionality of the kernel')
    7195:20110104:122222.324 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.324 Values in the buffer 1 Max 100
    7195:20110104:122222.324 JSON before sending [{
    "request":"agent data",
    "data":[
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/shadow\",\"mail\",\"UTF-8\",100]",
    "value":"ZBX_NOTSUPPORTED",
    "clock":1294140142}],
    "clock":1294140142}]
    7195:20110104:122222.325 JSON back [{
    "response":"success",
    "info":"Processed 0 Failed 1 Total 1 Seconds spent 0.000039"}]
    7195:20110104:122222.325 In check_response({
    "response":"success",
    "info":"Processed 0 Failed 1 Total 1 Seconds spent 0.000039"})
    7195:20110104:122222.325 Info from server: Processed 0 Failed 1 Total 1 Seconds spent 0.000039
    7195:20110104:122222.325 OK
    7195:20110104:122222.325 Buffer: new element 0
    7195:20110104:122222.326 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:437
    7195:20110104:122222.326 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.sysrq = 0')
    7195:20110104:122222.326 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.326 Values in the buffer 1 Max 100
    7195:20110104:122222.326 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.326 Buffer: new element 1
    7195:20110104:122222.326 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:454
    7195:20110104:122222.326 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:455
    7195:20110104:122222.326 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:526
    7195:20110104:122222.327 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:577
    7195:20110104:122222.327 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.core_uses_pid = 1')
    7195:20110104:122222.327 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.327 Values in the buffer 2 Max 100
    7195:20110104:122222.327 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.327 Buffer: new element 2
    7195:20110104:122222.327 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:602
    7195:20110104:122222.327 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:603
    7195:20110104:122222.327 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:640
    7195:20110104:122222.327 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:668
    7195:20110104:122222.328 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:669
    7195:20110104:122222.328 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:720
    7195:20110104:122222.328 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.msgmnb = 65536')
    7195:20110104:122222.328 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.328 Values in the buffer 3 Max 100
    7195:20110104:122222.328 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.328 Buffer: new element 3
    7195:20110104:122222.328 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:742
    7195:20110104:122222.328 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:743
    7195:20110104:122222.329 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:798
    7195:20110104:122222.329 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.msgmax = 65536')
    7195:20110104:122222.329 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.329 Values in the buffer 4 Max 100
    7195:20110104:122222.329 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.329 Buffer: new element 4
    7195:20110104:122222.329 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:820
    7195:20110104:122222.329 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:821
    7195:20110104:122222.329 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:874
    7195:20110104:122222.329 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.shmmax = 4294967295')
    7195:20110104:122222.330 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.330 Values in the buffer 5 Max 100
    7195:20110104:122222.330 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.330 Buffer: new element 5
    7195:20110104:122222.330 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:901
    7195:20110104:122222.330 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:902
    7195:20110104:122222.330 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:968
    7195:20110104:122222.330 In process_value('adm1.xxx.xxx','log["/test_logmon/sysctl.conf","kernel","UTF-8",100]','kernel.shmall = 268435456')
    7195:20110104:122222.330 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.331 Values in the buffer 6 Max 100
    7195:20110104:122222.331 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.331 Buffer: new element 6
    7195:20110104:122222.331 In process_log() filename:'/test_logmon/sysctl.conf' lastlogsize:994
    7195:20110104:122222.331 In process_log() filename:'/test_logmon/tcsd.conf' lastlogsize:0
    7195:20110104:122222.331 Cannot open [/test_logmon/tcsd.conf] [Permission denied]
    7195:20110104:122222.331 Active check [log["/test_logmon/tcsd.conf","Description","UTF-8",100]] is not supported. Disabled.
    7195:20110104:122222.331 In process_value('adm1.xxx.xxx','log["/test_logmon/tcsd.conf","Description","UTF-8",100]','ZBX_NOTSUPPORTED')
    7195:20110104:122222.331 In send_buffer('172.17.X.X','10051')
    7195:20110104:122222.331 Values in the buffer 7 Max 100
    7195:20110104:122222.331 Will not send now. Now 1294140142 lastsent 1294140142 < 5
    7195:20110104:122222.331 Buffer: new element 7
    7195:20110104:122222.331 In get_min_nextcheck()
    7195:20110104:122222.331 Sleeping for 1 seconds
    7195:20110104:122223.333 In send_buffer('172.17.X.X','10051')
    7195:20110104:122223.333 Values in the buffer 8 Max 100
    7195:20110104:122223.333 Will not send now. Now 1294140143 lastsent 1294140142 < 5
    7195:20110104:122223.333 Sleeping for 1 seconds
    7195:20110104:122224.335 In send_buffer('172.17.X.X','10051')
    7195:20110104:122224.335 Values in the buffer 8 Max 100
    7195:20110104:122224.335 Will not send now. Now 1294140144 lastsent 1294140142 < 5
    7195:20110104:122224.335 Sleeping for 1 seconds
    7195:20110104:122225.337 In send_buffer('172.17.X.X','10051')
    7195:20110104:122225.337 Values in the buffer 8 Max 100
    7195:20110104:122225.337 Will not send now. Now 1294140145 lastsent 1294140142 < 5
    7195:20110104:122225.337 Sleeping for 1 seconds
    7195:20110104:122226.339 In send_buffer('172.17.X.X','10051')
    7195:20110104:122226.339 Values in the buffer 8 Max 100
    7195:20110104:122226.339 Will not send now. Now 1294140146 lastsent 1294140142 < 5
    7195:20110104:122226.339 Sleeping for 1 seconds
    7195:20110104:122227.341 In send_buffer('172.17.X.X','10051')
    7195:20110104:122227.341 Values in the buffer 8 Max 100
    7195:20110104:122227.341 JSON before sending [{
    "request":"agent data",
    "data":[
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"# Controls the System Request debugging functionality of the kernel",
    "lastlogsize":437,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.sysrq = 0",
    "lastlogsize":454,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.core_uses_pid = 1",
    "lastlogsize":602,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.msgmnb = 65536",
    "lastlogsize":742,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.msgmax = 65536",
    "lastlogsize":820,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.shmmax = 4294967295",
    "lastlogsize":901,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/sysctl.conf\",\"kernel\",\"UTF-8\",100]",
    "value":"kernel.shmall = 268435456",
    "lastlogsize":994,
    "clock":1294140142},
    {
    "host":"adm1.xxx.xxx",
    "key":"log[\"\/test_logmon\/tcsd.conf\",\"Description\",\"UTF-8\",100]",
    "value":"ZBX_NOTSUPPORTED",
    "clock":1294140142}],
    "clock":1294140147}]
    7195:20110104:122227.342 JSON back [{
    "response":"success",
    "info":"Processed 0 Failed 8 Total 8 Seconds spent 0.000201"}]
    7195:20110104:122227.342 In check_response({
    "response":"success",
    "info":"Processed 0 Failed 8 Total 8 Seconds spent 0.000201"})
    7195:20110104:122227.342 Info from server: Processed 0 Failed 8 Total 8 Seconds spent 0.000201
    7195:20110104:122227.342 OK
    7195:20110104:122227.343 Sleeping for 1 seconds
    7195:20110104:122228.344 In send_buffer('172.17.X.X','10051')
    7195:20110104:122228.344 Values in the buffer 0 Max 100
    7195:20110104:122228.344 Will not send now. Now 1294140148 lastsent 1294140147 < 5
    7195:20110104:122228.344 Sleeping for 1 seconds
    7195:20110104:122229.345 In send_buffer('172.17.X.X','10051')
    7195:20110104:122229.345 Values in the buffer 0 Max 100
    7195:20110104:122229.345 Will not send now. Now 1294140149 lastsent 1294140147 < 5
    7195:20110104:122229.345 Sleeping for 1 seconds
    7195:20110104:122230.348 In send_buffer('172.17.X.X','10051')
    7195:20110104:122230.348 Values in the buffer 0 Max 100


    Any help will be appreciated.

    Have a good day

    Thanks.
  • Colttt
    Senior Member
    Zabbix Certified Specialist
    • Mar 2009
    • 878

    #2
    yes, zabbix need read-permission to monitoring a log-file..
    but it is dangerous, because EVERYBODY can then read the log-file
    Debian-User

    Sorry for my bad english

    Comment

    • Bertrand39100
      Junior Member
      • Feb 2010
      • 27

      #3
      Thanks a lot for your informations I still don't managed to have log monitoring working because all tests I do, everything is good on agent side (read access for zabbix account to log file) ,all informations are successully analyzed and found in zabbix_agentd.log file but i have nothing on server side in all items I make test (no data all fields empty); no error ; no firewall between agent and server , both are located on same lan.

      Does zabbix account user should have special access on linux directory where log files are stored ?

      Does the following rights on the log file is correct ? (no error in zabbix_agentd.log but not working on server side)

      -rw-r--r-- 1 root root 994 Dec 30 13:01 sysctl.conf

      otherwise it's not a file permission problem, but I don't know what

      Any ideas will be appreciated.

      Thanks.

      Comment

      • Colttt
        Senior Member
        Zabbix Certified Specialist
        • Mar 2009
        • 878

        #4
        did you try it with zabbix-get on the server

        zabbix_get -s IP-Address_from_Client -k you_Query

        or try the log-level higher from the client and restart the zabbix-client and check the logs..
        Debian-User

        Sorry for my bad english

        Comment

        • Bertrand39100
          Junior Member
          • Feb 2010
          • 27

          #5
          Guten Morgen Her ShaDow,

          First, thanks again for you answer.

          Let me tell you what I have, here below you have informations :

          ON AGENT SIDE :

          -bash-3.2# ps -ef | grep zabbix_agentd
          zabbix 16124 1 0 10:45 ? 00:00:00 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          zabbix 16125 16124 0 10:45 ? 00:00:08 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          zabbix 16126 16124 0 10:45 ? 00:00:00 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          zabbix 16127 16124 0 10:45 ? 00:00:00 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          zabbix 16128 16124 0 10:45 ? 00:00:00 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          zabbix 16129 16124 0 10:45 ? 00:00:00 ./zabbix_agentd -c /etc/zabbix_agentd/zabbix_agentd.conf
          root 16163 16070 0 12:00 pts/0 00:00:00 grep zabbix_agentd
          -bash-3.2# more /etc/zabbix_agentd/zabbix_agentd.conf
          Server=172.17.4.5,172.17.4.205
          Hostname=adm1.fc-sante.priv
          ServerPort=10051
          ListenPort=10050
          StartAgents=3
          DebugLevel=4
          RefreshActiveChecks=120
          MaxLinesPerSecond=100
          EnableRemoteCommands=1
          LogRemoteCommands=1
          LogFileSize=5
          LogFile=/var/log/zabbix_agentd/zabbix_agentd.log
          LogUnresolvedSymbols=/var/log/zabbix_agentd/zabbix_unresolved_symbols.log
          PidFile=/var/run/zabbix_agentd/zabbix_agentd.pid
          Include=/etc/zabbix_agentd/include/
          -bash-3.2# telnet 172.17.X.X 10050
          Trying 172.17.X.X...
          Connected to 172.17.X.X (172.17.X.X).
          Escape character is '^]'.
          Connection closed by foreign host.
          -bash-3.2# telnet 172.17.X.X 10051
          Trying 172.17.X.X...
          Connected to 172.17.X.X (172.17.X.X).
          Escape character is '^]'.

          Connection closed by foreign host.
          -bash-3.2#


          ON SERVER SIDE :

          [root@ids bin]# ./zabbix_get -V
          Zabbix Get v1.8 (revision 8565) (7 December 2009)
          Compilation time: Dec 18 2009 17:59:34
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"vfs.fs.inode[/]"
          4443392
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"vfs.fs.size[/,pused]"
          25.594916
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"vfs.fs.size[/,pfree]"
          74.405035
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"vfs.fs.size[/root,pused]"
          2.029151
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"vfs.fs.size[/root,pfree]"
          97.970849
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10050 -k"log["/test11_logmon/sysctl.conf","kernel","UTF-8",100]"
          Accessible only as active check!
          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10051 -k"log["/test11_logmon/sysctl.conf","kernel","UTF-8",100]"
          zabbix_get [22707]: Get value error: Cannot connect to [172.17.X.X:10051] [Connection refused]
          [root@ids bin]# telnet 172.17.X.X 10050
          Trying 172.17.X.X...
          Connected to adm1.fc-sante.fr.4.17.172.in-addr.arpa (172.17.X.X).
          Escape character is '^]'.

          Connection closed by foreign host.
          [root@ids bin]# telnet 172.17.X.X 10051
          Trying 172.17.X.X...
          telnet: connect to address 172.17.X.X: Connection refused
          telnet: Unable to connect to remote host: Connection refused
          [root@ids bin]# telnet 172.17.X.X 10051
          Trying 172.17.X.X...
          telnet: connect to address 172.17.X.X: Connection refused
          telnet: Unable to connect to remote host: Connection refused
          [root@ids bin]#


          [root@ids bin]# netstat -atn
          Connexions Internet actives (serveurs et établies)
          Proto Recv-Q Send-Q Local Address Foreign Address State
          tcp 0 0 0.0.0.0:10050 0.0.0.0:* LISTEN
          tcp 0 0 172.17.X.X:10051 0.0.0.0:* LISTEN
          tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
          tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
          tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
          tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37351 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37319 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37287 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37479 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37447 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37415 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37383 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37350 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37318 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37286 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37478 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37446 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37414 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37382 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37349 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37317 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37285 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37477 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37445 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37413 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37381 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37348 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37316 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37284 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37476 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37444 TIME_WAIT
          tcp 0 0 172.17.X.X:46095 172.17.X.XX:80 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37412 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37380 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37475 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37443 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37379 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37346 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37314 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37474 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37442 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37410 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37378 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37345 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37313 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37473 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37441 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37409 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37377 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37344 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37312 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37472 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37440 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37408 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37376 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37359 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37327 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37455 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37423 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37391 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37358 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37326 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37294 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37486 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37454 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37422 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37390 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37357 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37325 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37293 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37485 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37453 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37421 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37389 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37356 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37324 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37292 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37484 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37452 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37420 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37388 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37355 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37323 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37291 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37483 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37451 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37419 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37387 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37354 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37290 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37482 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37450 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37418 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37386 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37353 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37321 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37289 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37481 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37449 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37417 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37385 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37352 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37320 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37288 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37480 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37448 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37416 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37384 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37367 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37335 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37303 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37463 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37431 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37399 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37366 TIME_WAIT
          tcp 0 0 127.0.0.1:41447 127.0.0.1:80 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37334 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37302 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37462 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37430 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37398 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37365 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37333 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37461 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37429 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37397 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37364 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37332 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37300 TIME_WAIT
          tcp 0 0 127.0.0.1:37301 127.0.0.1:10050 TIME_WAIT
          tcp 0 0 127.0.0.1:37305 127.0.0.1:10050 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37460 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37428 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37363 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37331 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37299 TIME_WAIT
          tcp 0 9260 172.17.X.X:22 172.XX.XX.XX:2109 ESTABLISHED
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37491 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37459 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37427 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37395 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37362 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37330 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37298 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37490 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37458 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37426 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37394 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37361 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37329 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37297 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37489 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37457 TIME_WAIT
          tcp 0 0 172.17.X.X:58682 172.17.X.XX:80 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37425 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37393 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37360 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37328 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37296 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37488 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37456 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37424 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37392 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37375 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37343 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37311 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37471 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37439 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37407 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37374 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37342 TIME_WAIT
          tcp 0 0 172.17.X.X:42406 172.17.X.XX:80 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37470 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37438 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37406 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37373 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37341 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37309 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37469 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37437 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37405 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37372 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37340 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37308 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37468 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37436 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37404 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37371 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37339 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37307 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37467 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37435 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37403 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37370 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37338 TIME_WAIT
          tcp 0 0 172.17.X.X:59754 172.17.X.XX:1720 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37306 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37466 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37434 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37402 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37369 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37337 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37465 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37433 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37401 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37368 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37336 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37304 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37464 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37432 TIME_WAIT
          tcp 0 0 127.0.0.1:10050 127.0.0.1:37400 TIME_WAIT


          I don't know how to solve the upper problem :

          [root@ids bin]# ./zabbix_get -s172.17.X.X -p10051 -k"log["/test11_logmon/sysctl.conf","kernel","UTF-8",100]"
          zabbix_get [22707]: Get value error: Cannot connect to [172.17.X.X:10051] [Connection refused]

          Do you think if something wrong or missing in zabbix_agentd.conf ?

          Thanks.

          Have a good week-end.

          Comment

          • alixen
            Senior Member
            • Apr 2006
            • 474

            #6
            Hi,

            Originally posted by Bertrand39100
            Good morning All,

            Can anyone help me solving my problem about Log File Monitoring ?
            Could you explain your goal ?
            The file you are trying to monitor are obviously not log files but configuration files.
            Log files are supposed to grow and zabbix agent will collect new lines appended to them.

            Zabbix agent has several items that will probably be more helpful in your case.
            Check vfs.file.* items for details.

            BTW, you also have
            Code:
            7195:20110104:122222.321 Cannot open [/test_logmon/shadow] [Permission denied]
            So you should change file access rights so that zabbix agent can read it.

            Bon courage
            Alixen
            http://www.alixen.fr/zabbix.html

            Comment

            • Bertrand39100
              Junior Member
              • Feb 2010
              • 27

              #7
              Bonjour Alixen,

              Sorry for all the information i gave. I would sumarise my problem :

              I don't managed to have linux file log monitoring working correctly.
              I want search pattern text in linux log files and be fired if special text is inside.

              Every test I do, I always have no information (no data) on zabbix server side in items fields like :


              On agentd side, the patern i want to search is successfully found in I can check that inside the zabbix_agentd.log.
              but on server side, I always have NOTHING in the item field

              for other item I monitor vfs... all informations is catch by the agentd and succesffully push and available to zabbix server GUI,
              I'm able to see all vfs key and other key(s) but not Log key or logrt key.
              (field is always empty in the GUI even if in zabbix_agentd.log file patern is successfully found).


              Thanks for your help.

              Bon week-end.


              Bertrand39100

              Comment

              • Colttt
                Senior Member
                Zabbix Certified Specialist
                • Mar 2009
                • 878

                #8
                ok you can add this in you zabbix-agentd.conf on the client:

                Code:
                UserParameter=log.check,grep Error /var/log/dmesg
                add log.check to you Parameter on zabbix-frontend, it may be help!?
                Debian-User

                Sorry for my bad english

                Comment

                • Bertrand39100
                  Junior Member
                  • Feb 2010
                  • 27

                  #9
                  ShaDow,

                  Thanks again for the informations ...

                  Have a good day.

                  Bertrand 39100.

                  Comment

                  Working...