I need to set up a zabbix trigger that will check a log file from 20h to 22h each day, and look for a certain pattern. in case there is no data in these two hours, an alert is fired. The syntax of the trigger I configured is like this:
This Trigger works fine, However, I've noticed two bad sides:
If the pattern has not been inserted at 20h, it fires an alert, but I need it to fire it only if the pattern is still not written at 22h.
Even if the pattern has not been written until 22h, it sends an OK message once it is 22h00m30s (once it is no longer in the specified time period)
I was thinking of reducing the time period to 30min (from 21h30 to 22h): this resolved the first issue, but I still have troubles with the second one.
One last thing, if I reduce the time period to 30min but kept the agent looking for data for 7800s (nodata(7800)), will it check logs entries that have been written before 21h30?
Please if you have any suggestion I will be grateful!
HTML Code:
"{item.time(0)}>200000&{item.time(0)}<220000&{item.nodata(7800)}=1"
If the pattern has not been inserted at 20h, it fires an alert, but I need it to fire it only if the pattern is still not written at 22h.
Even if the pattern has not been written until 22h, it sends an OK message once it is 22h00m30s (once it is no longer in the specified time period)
I was thinking of reducing the time period to 30min (from 21h30 to 22h): this resolved the first issue, but I still have troubles with the second one.
One last thing, if I reduce the time period to 30min but kept the agent looking for data for 7800s (nodata(7800)), will it check logs entries that have been written before 21h30?
Please if you have any suggestion I will be grateful!