Hello,
I've got Zabbix reading log rotations for files similar to below:
These files all update at the same time, thousands of messages per second all day until they rotate to the next date.
logrt[C:\XXXXX\XXXXX\*GT-XXXXX-iLink-*,,,,skip,]
When i have a rotation setup like that, Zabbix ends up re-reading files and sends alerts for events that happened earlier in the day over and over as it restarts reading (which it shouldn't)
Now i'm trying to deploy these to multiple servers - and the last part of the lettering 6M/6N etc will be different on every server. Hense my use of wildcards in the log rotation.
Is there anyway to stop zabbix from re-reading them??? I was trying to find a way to have a low level discovery find each logfile name and make an individual item for each - but i can't figure out how.
I've got Zabbix reading log rotations for files similar to below:
These files all update at the same time, thousands of messages per second all day until they rotate to the next date.
logrt[C:\XXXXX\XXXXX\*GT-XXXXX-iLink-*,,,,skip,]
When i have a rotation setup like that, Zabbix ends up re-reading files and sends alerts for events that happened earlier in the day over and over as it restarts reading (which it shouldn't)
Now i'm trying to deploy these to multiple servers - and the last part of the lettering 6M/6N etc will be different on every server. Hense my use of wildcards in the log rotation.
Is there anyway to stop zabbix from re-reading them??? I was trying to find a way to have a low level discovery find each logfile name and make an individual item for each - but i can't figure out how.