Ad Widget

Collapse

[HELP]Regex in log monitoring

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • akbar415
    Senior Member
    • May 2015
    • 119

    #1

    [HELP]Regex in log monitoring

    I have a log file with lines like this


    Code:
     ...
    2016-02-02 17:03:10 INFO  PixSibCNSFilaProcessor:47 - Tempo da requisição:8219 ms (8.219 seg)
    ...
    I want to get the number after ":" (8219). As describe in the example here, I tried to do as follow

    Zabbix Key
    Code:
    log["E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log","Tempo da requis*: ([0-9]+)",,,,\1]
    And I receive nothing on zabbix server.


    Zabbix agent log


    Code:
     14656:20160215:143722.801    nr:0 filename:'E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log' mtime:1455556988 size:16957772 processed_size:16957731 seq:0 incomplete:1 dev:2 ino_hi:0 ino_lo:19421773393038165 md5size:512 md5buf:9beae35f26e3c7ddf83877d1822b8224
     14656:20160215:143722.801 process_logrt() new file list: (mtime:0 lastlogsize:16957731 start_idx:0)
     14656:20160215:143722.801    nr:0 filename:'E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log' mtime:1455557842 size:17082204 processed_size:16957731 seq:0 incomplete:0 dev:2 ino_hi:0 ino_lo:19421773393038165 md5size:512 md5buf:9beae35f26e3c7ddf83877d1822b8224
     14656:20160215:143722.801 In process_log() filename:'E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log' lastlogsize:16957731 mtime: 0
     14656:20160215:143722.801 End of process_log() filename:'E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log' lastlogsize:17082022 mtime: 0 ret:SUCCEED
     14656:20160215:143722.801 End of process_logrt():SUCCEED error_count:0
    Looks like zabbix agent don't find my regex (error_count:0).

    Help me, please.
    Last edited by akbar415; 16-02-2016, 15:37. Reason: Mark question as solved
  • davide.dasaro
    Junior Member
    • Feb 2016
    • 3

    #2
    Hi,
    I try to help you.
    Can you try changing your item with the regular expression below:

    log["E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log","requisição[0-9]+)",,,,\1]

    sorry for my English

    Davide

    Comment

    • Firm
      Senior Member
      • Dec 2009
      • 342

      #3
      You missed dot in regexp:
      Code:
      log["E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log","Tempo da requis.*: ([0-9]+)",,,,\1]

      Comment

      • akbar415
        Senior Member
        • May 2015
        • 119

        #4
        Solved

        Work this way.


        Code:
        log["E:\aplicacoes\sib\sib-integr-cns\log\TestZabbix\sib-intgr-pix.log"," ([0-9]+) ms",,,,\1]
        Thanks davide.dasaro and Firm for your help.

        Comment

        Working...