triger for monitoring log files

[mario.almeida]

Hi All,
I am using zabbix 1.8.4

I tried the below 2 trigers but non seems to be working.

{server:log[/tmp/zabbix.log,signature check failed].str(signature check failed)}=1

{server:log[/tmp/zabbix.log,signature check failed].nodata(0)}#1

For the first time the triger will come true but it never become false.

Noticed under latest data -> history also it is not updated.

[mario.almeida]

Hi All,

After analysing found that data under history is update but the trigger is not turned off

Can someone help me in this.

[mario.almeida]

Seems like no one has faced this kind issue.

[mario.almeida]

Hi,

Any hints to find the cause.

[vinh.ho]

sorry but is it important to monitor zabbix log ?
because when you create new trigger or item, if your configuration not true, when you restart zabbix_agentd, the zabbib_agentd.log show immediately
and the fact is you are sometine restart your zabbix_agentd
so is it important & you're monitoring zabbix log file for what ?

[mario.almeida]

sorry but is it important to monitor zabbix log ?
because when you create new trigger or item, if your configuration not true, when you restart zabbix_agentd, the zabbib_agentd.log show immediately
and the fact is you are sometine restart your zabbix_agentd
so is it important & you're monitoring zabbix log file for what ?

Well, Just because I put /tmp/zabbix.log it dose not mean I am monitoring zabbix log files.

BTW, even if I am monitoring zabbix log the functionality should work for what it is meant.

Please note: /tmp/zabbix.log file is an example.

[vinh.ho]

ok bro
i know some application that can share with you
if you want to analyze apache log, take a look to Awstats
Awstats is an application that analyze your access_log and build it to a web,
then you must create items & trigger to monitor some feature of it
have fun man !

[mario.almeida]

Thanks for the alternative,

But thats not what I am looking for.
By having another application to monitor the log files meaning using more resources on the client side.

My point is to find a solution for zabbix rather to go for an alternative.

As an alternative, I still use zabbix to monitor the log files, but in cron job I execute a SQL query to set the value of that trigger to 0.

I will stick to this as an alternative then to install another application on all the clients.

I did use watchlog but prefer to stick with zabbix its easy for me.