Hi,
I have an item configured which checks log files for error patterns twice per day and have configured the following trigger to fire if the item has found anything in the last 12 hours:
{loghost:log[/logpath/logname.log,{$ERR_PATTERN},"UTF-8",50].str(43200)}=1
As you can gues by the thread title, the trigger does not fire. It goes "unknown" but always recovers to ok even though there are errors that have been captured from the log.
When I've run the item and trigger over shorter update intervals, 600 secs for example, the trigger will fire.
Can someone explain to me why this trigger is failing to fire given that it works at shorter intervals? BTW, the reason I have the interval set so long is to avoid multiple firings during the day. I have a notification configured so that an email will be dispatched when errors are found. I don't want to be despatching email alerts every x minutes when the item gets an update.
Any help/suggestions will be warmly received.
Regards,
David
I have an item configured which checks log files for error patterns twice per day and have configured the following trigger to fire if the item has found anything in the last 12 hours:
{loghost:log[/logpath/logname.log,{$ERR_PATTERN},"UTF-8",50].str(43200)}=1
As you can gues by the thread title, the trigger does not fire. It goes "unknown" but always recovers to ok even though there are errors that have been captured from the log.
When I've run the item and trigger over shorter update intervals, 600 secs for example, the trigger will fire.
Can someone explain to me why this trigger is failing to fire given that it works at shorter intervals? BTW, the reason I have the interval set so long is to avoid multiple firings during the day. I have a notification configured so that an email will be dispatched when errors are found. I don't want to be despatching email alerts every x minutes when the item gets an update.
Any help/suggestions will be warmly received.
Regards,
David