I am wanting to track an events that happen on my servers in production (I don't have an agent so I am rsynching the logs to a server where I can process them).
Initially I was thinking I would have an integer item and just set the item value to '1' whenever the event is found in the logs (using the timestamp found in the log).
This doesn't directly give me what I want (which is a way to see RATE at which this event occurs (number of hits per period of time)).
My question is what is the right approach here?
I poked around for a while and really couldn't find anything to help...
Thanks in advance!
Initially I was thinking I would have an integer item and just set the item value to '1' whenever the event is found in the logs (using the timestamp found in the log).
This doesn't directly give me what I want (which is a way to see RATE at which this event occurs (number of hits per period of time)).
My question is what is the right approach here?
- I can imagine creating a new item which is calculated from the one I am updating that represents
- I can have my script just report on the count per time interval
- something else?
I poked around for a while and really couldn't find anything to help...
Thanks in advance!