Hi all,
We are using Zabbix to monitor log files and stumbled upon some questions\problems that we would be glad to get some insights on.
We have a system that creates a log file hourly with a changing name "logfile_yyyymmddhhmm.log" so Zabbix knows to take the latest modified logfile but how can I make sure it has read all the lines in the log before that?
For example, a log named "logfile_20250251600.log" gets modified at 16:57, and a new log is created at 17:00 how can be sure that Zabbix read all the lines in the log off at 16:00 if the reading interval is 5 minutes?
Thank you in advance for your help!
We are using Zabbix to monitor log files and stumbled upon some questions\problems that we would be glad to get some insights on.
We have a system that creates a log file hourly with a changing name "logfile_yyyymmddhhmm.log" so Zabbix knows to take the latest modified logfile but how can I make sure it has read all the lines in the log before that?
For example, a log named "logfile_20250251600.log" gets modified at 16:57, and a new log is created at 17:00 how can be sure that Zabbix read all the lines in the log off at 16:00 if the reading interval is 5 minutes?
Thank you in advance for your help!
logrotate creates a new one and old one is not yet read to the end... only thing is to shorten the reading time as much as possible.. 1s is there by default... And even with a 1s you may lose some, if you have some very fast growing files...
Comment