I have the following trigger defined:
{server01:log[/var/log/hardware_failures].count(60,"scsi")} > 3
This is working properly, and going into a problem state like it should when more than 3 lines containing the word "scsi" is found in the last 60 seconds.
The problem I am having is that it never returns itself back to an "OK" state when the count is 0. IE, I can manually put 4 lines into the file that contain "scsi", watch it go from "OK" to "Problem", but it never recovers itself the next minute. It stays in a problem state until I put *something* in the file for it to be able to count.
How do I format this trigger so that it will go back into an "OK" state if nothing else is added to the file?
Thanks!
{server01:log[/var/log/hardware_failures].count(60,"scsi")} > 3
This is working properly, and going into a problem state like it should when more than 3 lines containing the word "scsi" is found in the last 60 seconds.
The problem I am having is that it never returns itself back to an "OK" state when the count is 0. IE, I can manually put 4 lines into the file that contain "scsi", watch it go from "OK" to "Problem", but it never recovers itself the next minute. It stays in a problem state until I put *something* in the file for it to be able to count.
How do I format this trigger so that it will go back into an "OK" state if nothing else is added to the file?
Thanks!