Monitor logfile

[npost]

Hi,

I want to monitor a log for a keyword. I now use vfs.file.regmatch with a trigger using function last(0)}#0. That works fine but with only one problem. The logfiles a rotating once a day and Zabbix does find the keyword all day. I want to add a function at the trigger that if the keyword has not shown for 5 minutes, the alert disappears. But i don't know what function to use.
Can someone help me with this.

Best regards.

[bagni]

Hi,
I suggest to concatenate the trigger with 'AND' operator and use the function .nodata(120)}=0, so if you don't have triggered values within 2 minutes the trigger go down.
I don't know why you use the vfs.file.regmatch item but if you use ServerActive maybe is better the log or logrt item.

[npost]

Thank you for your help. The server active doesn't work for me. I'm going to solve this with my hostingcompany.
But your option doesn't work. The logfile is updated all day and rotates once a day. So when the keyword is in the log, it's there all day. I think with vfs.file.regmatch it's reading the complete log file every time? So the keyword is every time there.