Can't monitor log files -

[gaidukas]

I've tried searching the forms for a solution to my issue but have not been able to find a resolution.

I have a new install of zabbix server 2.06 and many agent hosts up and running properly but I'm not able to monitor log files.

Here are the settings to for zabbix_agentd.conf: (comments removed)

PidFile=/var/run/zabbix/zabbix_agentd.pid
LogFile=/var/log/zabbix/zabbix_agentd.log
LogFileSize=0
DebugLevel=4
EnableRemoteCommands=1
Server=10.30.50.50
StartAgents=3
ServerActive=10.30.50.50:20051
Hostname=Host123
#HostnameItem=system.hostname
Include=/etc/zabbix/zabbix_agentd.d/

I'm testing from the zabbix host server the following command:

zabbix_get -s Host123 -k log["/var/log/zabbix/zabbix_agentd.log","error"]

I've also testing with ' in place of " and also:

zabbix_get -s Host123 -k log[/var/log/zabbix/zabbix_agentd.log,"error",0,1000]

All tests return: ZBX_NOTSUPPORTED

On the client host I ran:

root@Host123:~# zabbix_agentd -V
Zabbix Agent (daemon) v2.0.6 (revision 35158) (22 April 2013)
Compilation time: Apr 29 2013 06:38:04

I seem to be stuck and unable to resolve this.
Any help would be appreciated!

-Glen

[richlv]

log items must be active, thus you will never be able to use them with _get - they must be created on server and then processed by the agent

[gaidukas]

OK, that explains why I can test using zabbix_get.

What is the best way to test? Every time I make a change to the item in my template, it takes many minutes before it starts monitoring it due to having to wait for the template to be reassigned to the host.

Thanks,

-Glen

[tchjts1]

it takes many minutes before it starts monitoring it due to having to wait for the template to be reassigned to the host.

Glen - That's because it is in an "Unsupported" state when you make that change. It will wait for the amount of time that is set in the GUI under "Refresh unsupported items" in Administration --> General --> Upper right dropdown box, select "Other"
See my screenshot below.

One way around that is to go to the template where you made your changes, put a checkmark beside each item that you modified, then at the bottom left just click "Go" with the dropdown being on "Enable selected"
(Edit) Do that at the host level. It is possible the template may show all the items as "Enabled".

Jeff