Creating Trigger against Logfile item value
Hi am new to zabbix and trying to get to grips with some pretty basic stuff - In this instance I need to capture any Errors seen in a logfile and create a problem event against these. I have created my logfile item with the Key log[C:\temp\testlog.log,Error,,,skip] which provides me with the Error message in zabbix each time a new line matching the Error string is generated. I now need to create a trigger that creates a problem record with associated severity whenever this is seen. Is any one able to advise what the trigger expression should look like to achieve this, I have tried various combo's with no success
-
-
What do you mean with "associated severity"? If you have multiple different severity options in same logfile, then you must create multiple triggers, each with its own severity and create trigger expressions probably based on regex, which would select one or more matches for that severity... if all of them have to picked up also, you may need to set "PROBLEM event generation mode" to Multiple ... acknowledging them later will be pain, but some correlation rules or something may help you, if you don't want to close them manually...
You can also have a trigger expression combined with nodata function, so trigger generates a problem and stays open until there is silence again for defined period... There is plenty of examples here in forum.
Comment