Error log monitoring issue

[Joby]

Hi,

I have an issue in monitoring tomcat error log. I am using key word as 'ERROR' and nodata function in trigger to get email alerts whenever there is an error is there. The issue is that, while the trigger is in fired state no more errors happened during that time until trigger counter has reset is not available.

Thanks

[nicolasg]

What's is your current configuration ?

Here is an example to monitor /opt/tomcat/logs/catalina.out for the ERROR keyword, it will fire an alert and clear it self after 10 minutes if ERROR is not detected again :

### ITEM ###
Name: ERROR count in /opt/tomcat/logs/catalina.out
Type: Zabbix agent (active)
Key: log["/opt/tomcat/logs/catalina.out","ERROR"]
Type of information: Log


### Trigger ###
Name: ERROR detected on {HOST.NAME}
Expression: {YOUR_TAMPLE_NAME:log["/opt/tomcat/logs/catalina.out","ERROR"].nodata(600)}#1

Regards,
N.

[Joby]

What's is your current configuration ?

Here is an example to monitor /opt/tomcat/logs/catalina.out for the ERROR keyword, it will fire an alert and clear it self after 10 minutes if ERROR is not detected again :

### ITEM ###
Name: ERROR count in /opt/tomcat/logs/catalina.out
Type: Zabbix agent (active)
Key: log["/opt/tomcat/logs/catalina.out","ERROR"]
Type of information: Log


### Trigger ###
Name: ERROR detected on {HOST.NAME}
Expression: {YOUR_TAMPLE_NAME:log["/opt/tomcat/logs/catalina.out","ERROR"].nodata(600)}#1

Regards,
N.

I am already using this trigger, but my issue is if a new error is detected before clearing the first trigger counter, I won't get any email alert regarding the error. This is my problem. Currently I am using 30 seconds to clear the trigger counter.