log[] key maxlines doesn't seem to work
Hello,
Need a quick help on the zabbix trigger rule. log[file,<regexp>,<encoding>,<maxlines>,<mode>,<output >,<maxdelay>] maxlines doesn't seem to work
I have a trigger setup as below:
{servername:log[/var/log/messages,".*oom-killer.*",,1000].str("oom")}<>0
with update interval = 30s
and storage days = 90d
As I specified "1000" above for maxlines, I expect this not to trigger for lines older than 1000 entries.
However somehow above trigger generated alerts for the very same oom error at a specific time.everyday. Even though the original error was already followed by few thousands of new lines.
Thanks,
Charlie
Need a quick help on the zabbix trigger rule. log[file,<regexp>,<encoding>,<maxlines>,<mode>,<output >,<maxdelay>] maxlines doesn't seem to work
I have a trigger setup as below:
{servername:log[/var/log/messages,".*oom-killer.*",,1000].str("oom")}<>0
with update interval = 30s
and storage days = 90d
As I specified "1000" above for maxlines, I expect this not to trigger for lines older than 1000 entries.
However somehow above trigger generated alerts for the very same oom error at a specific time.everyday. Even though the original error was already followed by few thousands of new lines.
Thanks,
Charlie