Hello guys!
I had an issue with a log monitoring, everything seems fine, but I am trying to understand why the monitoring didn't work.
I have a template that uses LLD to discover log file, the item and trigger were created fine. A few log lines matched with the positive REGEX and there should be a problem. I discovered the issue the next day in another host because the same template is applied to this host and triggered the Problem.
So I forced the problem on the host that didn't create the problem and it worked fine. I also applied the template in another host and copied the whole log file to this host (file size 5MB , about 47.000 lines) and I got the alert/Problem, so the template, MAXLINE... everything is fine,... any idea what happened or what can I check?
Item Prototype:
log["{#LOGFILE}",@REGEX,,1000,skip,,]
Trigger prototype:
length(last(/APP_LOG_CRITICAL/log["{#LOGFILE}",@REGEX,,1000,skip,,]))>=1
Best regards.
I had an issue with a log monitoring, everything seems fine, but I am trying to understand why the monitoring didn't work.
I have a template that uses LLD to discover log file, the item and trigger were created fine. A few log lines matched with the positive REGEX and there should be a problem. I discovered the issue the next day in another host because the same template is applied to this host and triggered the Problem.
So I forced the problem on the host that didn't create the problem and it worked fine. I also applied the template in another host and copied the whole log file to this host (file size 5MB , about 47.000 lines) and I got the alert/Problem, so the template, MAXLINE... everything is fine,... any idea what happened or what can I check?
Item Prototype:
log["{#LOGFILE}",@REGEX,,1000,skip,,]
Trigger prototype:
length(last(/APP_LOG_CRITICAL/log["{#LOGFILE}",@REGEX,,1000,skip,,]))>=1
Best regards.
Comment