Log file monitoring

[msnelling]

Hi,

I'm having problems setting up the log file monitoring in Zabbix 1.8.8. So far I have configured the agent to read the log files and have a host item that is able to log these events with a regex filter. The part I'm having trouble with is getting the trigger to reset when a non-error log entry is encountered.

The host item for receiving the log events is as follows.

logrt[""D:\\App\\logs\\Test\.log", "ERROR|FATAL|INFO|WARN"]

And is looking for log lines containing the text ERROR, FATAL, INFO or WARN. Messages with DEBUG are omitted.

What I want is if there is an ERROR or FATAL log message and no INFO for 5 minutes the produce an alert. The trigger below seems to activate correctly but will not reset when encountering an INFO log message.

{Odin:logrt["D:\\App\\logs\\Test\.log", "ERROR|FATAL|INFO|WARN"].regexp(ERROR|FATAL,300)}#0

I've included screen grabs of the Item and Trigger config pages.

Any help here would be great, I've tried searching the forums for similar questions but haven't found anything that works for me.

[msnelling]

Has no one ever had this problem or tried to do this? Surely I can't be the only one

[aic]

Has no one ever had this problem or tried to do this? Surely I can't be the only one

Hi,

Is there any help? I have set up a monitor like this in my Zabbix 1.8.3 and it works fine. I re-configure to use zabbix 1.8.8 with the same level of zabbix agent (1.8.3) and it doesn't works happy now.

Please help!

[msnelling]

No, there's no help coming from the community. How did you get this working in 1.8.3?

[aic]

Thanks for your reply.

I had set up identically and it was working my monitors over the logfile in zabbix_agentd 1.8.3. I am in trouble to use the same configuration over zabbix_agentd 1.8.8.