log file monitor basic

[Lake]

Hi again.

Big thanks for this forum getting know better of Zabbix.

So I try to start monitor log files.
I have try to search forums old tips, but not find right one.

My goal is monitor log file and grep error (non key sense) words from there.

so I have made Item and key of that is like

log[/tmp/log.log,error]

now I should do trigger, right?


// Lake

[Lake]

I found one way to do this.
Also I can create graphs from log file.

Items:

Name: Test Log Monitoring

Type: Zabbix agent(active)

Key: log[/tmp/log.log,(error|OK)]

Name: Test Log error count

Type: Calculated

Key: Test.log.error.count

Formula: count("log[/tmp/log.log,(error|OK)]", 60,"error","like")

Name: Test Log OK count

Type: Calculated

Key: Test.log.OK.count

Formula: count("log[/tmp/log.log,(error|OK)]", 60,"OK","like")

Trigger:

Name: Test Log Error Trigger

Expression: {server:Test.log.error.count.last(0)}>0

//Lake

[Firm]

You send log file entries matched you filter to Zabbix with help of log[]. You create trigger using string or regexp matching to data you received.