Log item entries from HTTP call.

[tribbin]

Hello everyone,

The organization I work for uses niche software that has a centralized HTTP REST API for monitoring processes and components.

For logging, the HTTP-response body contains a JSON array $.logs[] with log objects that look like this:

{
"taskRunId": "NLKNMC00:006207632",
"entryTime": 1630697958639,
"code": "Workflow.ActivityCompleted",
"componentId": "NLKNMC01",
"logEntryId": 33,
"level": "INFO",
"build": 105480,
"eventAcknowledged": 0,
"source": "FS 5 NLKNMC00:006207632",
"text": "CENSORED"
}

The API call returns the application logs from all components in the system from the last hour, without unique ID's and would like to map these entries in Zabbix while preserving the metadata:

• entryTime (unixtime)
• severity ('level')
• optional: source

Is this even possible? I've not been able to find anything on this use-case.

Regards,

Robin van Westrenen