Log monitoring

[akbar415]

Hi.

I'm replacing the Nagios by Zabbix. That is why I have a lot of questions here.

In Nagios, I can monitor a log file. When an Error Message show up, one e-mail is send informing something like this:
ERROR found
Error - Erro Searching information from file 1234567 (the line of log that have the ERROR word)
or
ERROR found
Error - java.lang.NullPointerException (the line of log that have the ERROR word)


In zabbix I do this:
Name: Check ERROR on Software log
Type:Zabbix agent (acitve)
key:log[/opt/logs/SystemFIndex.log,ERROR,us-ascii,,,]
Type of Information:Log


And configured the trigger:
{server13:log[/opt/logs/SystemFIndex.log,ERROR,us-ascii,,,].str()}=0


How I make something like Nagios did? When zabbix find out the word ERROR, will inform all the line where the word is.

[BDiE8VNy]

There are no log pattern matching line numbers send to Zabbix server which could then be referenced. Although a Zabbix agent sends the lastlogsize in bytes along with log based item values. But this meta information is for internal use only.

However, when thinking this is something useful, then possibly consider to create a feature request together with a use case on https://support.zabbix.com. If such or a similar request does not yet exist, of course.

But keep in mind Zabbix is not Nagios. The concepts are quite different - otherwise there were not that many people moving away from other NMS to Zabbix nowadays