Good afternoon,
I have been attempting to use Zabbix active checks to monitor a log file on my system and to look for a string indicating a failure. This works pretty well, however I'm not sure how you configure the active check to clear it's last value once it no longer sees the string in the log file(I understand it reads the log file, then the next iteration simply reads the log file from where it left off). If I look at the latest data for a host I know has had this issue in the past, but having tailed the log is no longer in strife, I still see the value set and the timestamp is 20+ minutes ago:
How do I configure this to "clear" once the Item no longer matches a value in the log?
Help!
I have been attempting to use Zabbix active checks to monitor a log file on my system and to look for a string indicating a failure. This works pretty well, however I'm not sure how you configure the active check to clear it's last value once it no longer sees the string in the log file(I understand it reads the log file, then the next iteration simply reads the log file from where it left off). If I look at the latest data for a host I know has had this issue in the past, but having tailed the log is no longer in strife, I still see the value set and the timestamp is 20+ minutes ago:
| log[/var/log/filebeat/filebeat,ERR|publishing] | 30 | 90 | Zabbix agent (active) | 2018-08-10 13:40:12 | 2018-08-10T13:40:12+01:00 ERR Con |
Help!
Comment