How to show log content in alert

[mgiammarco]

Hello,
I have written an item like this: logrt["/var/log/syslog(\.[0-9])*","(?i)error"]
A trigger like this:find(/Linux alerts by logs/logrt["/var/log/syslog(\.[0-9])*","(?i)error"],,"iregexp","error.*backup")=1
It works but I would like to show log content in trigger, how can I do it?
Thanks,
Mario

[ISiroshtan]

Hi there mate.

Macros functions allow you to extract data from macros. And built-in macros list you can find macros {ITEM.VALUE} and {ITEM.LASTVALUE}. Combining those two in Trigger Name lets you extract information from actual value.

Hope it helps.

[ISiroshtan]

Hi there mate.

Macros functions allow you to extract data from macros. And built-in macros list you can find macros {ITEM.VALUE} and {ITEM.LASTVALUE}. Combining those two in Trigger Name lets you extract information from actual value.

Hope it helps.

[mgiammarco]

Thank you I was getting crazy using macro {ITEM.LOG} when the right one was {ITEM.LASTVALUE} !