Hi,
I am new for Zabbix and I have setup a Zabbix that can send email when trigger found.
But my log monitor trigger seems not work, can anyone help?
Item
Type:Zabbix agent (active)
Key: log[/var/log/auth.log,Failed password,,100]
Type : Log
Trigger
Expression: {server:log[/var/log/auth.log,Failed password,,100].nodata(5m)}=0
The log look like:
Jun 18 11:58:33 SVN sshd[9830]: Failed password for account from xxxx
There are no trigger alert while the world "Failed password" found in the log file.
Thanks,
Mike
I am new for Zabbix and I have setup a Zabbix that can send email when trigger found.
But my log monitor trigger seems not work, can anyone help?
Item
Type:Zabbix agent (active)
Key: log[/var/log/auth.log,Failed password,,100]
Type : Log
Trigger
Expression: {server:log[/var/log/auth.log,Failed password,,100].nodata(5m)}=0
The log look like:
Jun 18 11:58:33 SVN sshd[9830]: Failed password for account from xxxx
There are no trigger alert while the world "Failed password" found in the log file.
Thanks,
Mike
Comment