This problem has me completely stumped. Basically I have 4 separate Linux servers all being monitored by a zabbix server. All ok there.
On each of these 4 servers is a log file in the same location on each. At any point in time all of the log files are being written to so their modify time is pretty much always within the last second or 2.
Also at any point in time there is an entry in all the log files one of which is being incremented while on the other 3 it is not being incremented, e.g.
(mylogfile on host 1):
.
.
counter = 0 <-------- not incrementing (stay at 0)
(mylogfile on host 2):
.
.
counter = 63467 <--------- incrementing each second
(mylogfile on host 3):
.
.
counter = 12 <------------- not (not incrementing )
(mylogfile on host 4):
.
.
counter = 0 <----------- not incrementing
Basically the logfile are in a kind of master/passive mode. The master one has the counter being incremented, the other 3 are passive and the counter is not incrementing.
I've been pulling my hair out trying to figure out how to alert when none of the four logfiles have that counter incrementing.
Any help would be greatly appreciated.
On each of these 4 servers is a log file in the same location on each. At any point in time all of the log files are being written to so their modify time is pretty much always within the last second or 2.
Also at any point in time there is an entry in all the log files one of which is being incremented while on the other 3 it is not being incremented, e.g.
(mylogfile on host 1):
.
.
counter = 0 <-------- not incrementing (stay at 0)
(mylogfile on host 2):
.
.
counter = 63467 <--------- incrementing each second
(mylogfile on host 3):
.
.
counter = 12 <------------- not (not incrementing )
(mylogfile on host 4):
.
.
counter = 0 <----------- not incrementing
Basically the logfile are in a kind of master/passive mode. The master one has the counter being incremented, the other 3 are passive and the counter is not incrementing.
I've been pulling my hair out trying to figure out how to alert when none of the four logfiles have that counter incrementing.
Any help would be greatly appreciated.