Hello,
I am new to zabbix and very new to this forum. I have a question regarding setting triggers on a log file monitoring item I have set.
I have the item checking the log for "Erro" & "Warn". My key is set to:
log[/tmp/jenntest.log,Fatl|Urgt|Erro|Warn]
I have set triggers that will alert if Erro or Warn are written to the logs 20+ times within a 10m time frame.
{*snipped data*.../tmp/jenntest.log,Fatl|Urgt|Erro|Warn].count(10m,Erro
}>=20
This is all working as expected.
My question is how can add exceptions into the trigger?
For example the log is being read and counting all lines within 10m time frame that have the word Erro and once it is 20+ it will alert, however any time a line has "Not found" in it I want it ignored in the trigger count.
sample log output:
I have done multiple searches and read many documents but cannot seem to find a way to perform this. My apologies if this has been answered in another post.
Regards,
I am new to zabbix and very new to this forum. I have a question regarding setting triggers on a log file monitoring item I have set.
I have the item checking the log for "Erro" & "Warn". My key is set to:
log[/tmp/jenntest.log,Fatl|Urgt|Erro|Warn]
I have set triggers that will alert if Erro or Warn are written to the logs 20+ times within a 10m time frame.
{*snipped data*.../tmp/jenntest.log,Fatl|Urgt|Erro|Warn].count(10m,Erro
}>=20This is all working as expected.
My question is how can add exceptions into the trigger?
For example the log is being read and counting all lines within 10m time frame that have the word Erro and once it is 20+ it will alert, however any time a line has "Not found" in it I want it ignored in the trigger count.
sample log output:
Erro: This needs to be counted
Erro: This is another line that needs to be counted
Erro: This is another line that needs to be counted
<etc>
Erro: Not Found
In the sample output above I would want all lines counted, that have Erro, with the exception of the line with "Not Found" in it.Erro: This is another line that needs to be counted
Erro: This is another line that needs to be counted
<etc>
Erro: Not Found
I have done multiple searches and read many documents but cannot seem to find a way to perform this. My apologies if this has been answered in another post.
Regards,
Comment