
Hi All,
I am new to zabbix and I am trying to monitor a pattern in /var/log/messages. If it found the message, trigger an alert or else don't trigger an alert
Here is my item
Type: Zabbix Agent(Active)
Key:log[/var/log/messages,/home/appl/bin/test_all.pl]- Type of information: log
Here is my tigger:
{xxx-supd-xxx.xxx.net:log[/var/log/messages,/home/appl/bin/test_all.pl].logsource(/var/log/messages)}=1
And I can see content in my messages
[root@vlib-supd-010101-1 ~]# cat /var/log/messages | grep -i "/home/appl/bin/test_all.pl"
2019-07-30T19:32:12+00:00 [email protected] /home/appl/bin/test_all.pl[17327]: Test: Proc-httpd Error: Process httpd doesn't seems to be alive [PID file: /var/run/httpd/httpd.pid]
2019-07-30T19:32:12+00:00 [email protected] /home/appl/bin/test_all.pl[17327]: RESTART SERVICE: Proc-httpd/home/operations/tools/restarthttpd-systemctl.sh - In the zabbix_agent logs I am also seeing this
- 437:20190808:111409.007 setup_old2new: is_same_file(/var/log/messages, /var/log/messages) = 1
18437:20190808:111409.007 process_logrt() old file list:
18437:20190808:111409.007 nr:0 filename:'/var/log/messages' mtime:1565171016 size:4539894 processed_size:4539894 seq:1 incomplete:0 dev:2049 ino_hi:0 ino_lo:8560473 md5size:512 md5buf:f37ff757afd7520526a9f66044de4cb6
18437:20190808:111409.007 process_logrt() new file list: (mtime:0 lastlogsize:4539894 start_idx:0)
18437:20190808:111409.007 nr:0 filename:'/var/log/messages' mtime:1565171016 size:4539894 processed_size:4539894 seq:1 incomplete:0 dev:2049 ino_hi:0 ino_lo:8560473 md5size:512 md5buf:f37ff757afd7520526a9f66044de4cb6
18437:20190808:111409.007 End of process_logrt():SUCCEED
18437:20190808:111409.007 In need_meta_update() key:log[/var/log/messages,/home/appl/bin/test_all.pl]
18437:20190808:111409.007 End of need_meta_update():FAIL
Can anyone please help me?
Ad Widget
Collapse
Not triggering an alerts when a key word is found in /var/log/messages
Collapse
X
-
Not triggering an alerts when a key word is found in /var/log/messages
Last edited by Supriya123; 08-08-2019, 13:15.Tags: None