Monitoring of the txt file (modification time) and changing the file name every month

[Nolaan]

Hello,

I monitor the log file last modification time.
Everything works fine, I have the item key:
vfs.file.time[/var/log/external/2021/billing,modify]


And trigger expression:
fuzzytime(/Logserver/vfs.file.time[/var/log/external/2021/billing,modify],2820)=0


But I would like to make some modification
in syslog-ng I would like to set the file name to be changed every month and year
Currently I have this:

source ttyS0 { file ("/dev/ttyS0"); };
destination ttyS0 { file("/var/log/external/2021/billing"); };
log { source(ttyS0); destination(ttyS0); };

I want to have this:

source ttyS0 { file ("/dev/ttyS0"); };
#destination ttyS0 { file("/var/log/external/$YEAR/billing-$YEAR-$MONTH"); };
log { source(ttyS0); destination(ttyS0); };

But I have no idea how to monitor it in Zabbix

[Nolaan]

I want to have this:

source ttyS0 { file ("/dev/ttyS0"); };
#destination ttyS0 { file("/var/log/external/$YEAR/billing-$YEAR-$MONTH"); };
log { source(ttyS0); destination(ttyS0); };

I tried
vfs.file.time[/var/log/external/{{TIME}.fmttime(%Y)}/billing-{{TIME}.fmttime(%Y-%m)},modify]
but it doesn't work

[cyber]

If you look into docs, then it might save your testing time ..
Do you see here "Item key parameters"? No...

https://www.zabbix.com/documentation/4.4/en/manual/appendix/macros/supported_by_location

{TIME}

→ Trigger-based notifications and commands → Problem update notifications and commands → Discovery notifications and commands → Autoregistration notifications and commands → Internal notifications

Current time in hh:mm:ss.

Unfortunately, vfs.file.time only accepts full paths. so you cannot even use regex here.. Find a way to keep "year" and "month" in user macros and update them every month. That's pretty much your only option here...

[jankowalski]

You may want to use discovery rules to get current year and month.