Syslog monitoring

[govath]

Hi,

Im new to zabbix and i want to monitor contents of syslog file in a linux machine.

There is an option to monitor syslog size ... who needs that ?
also log[file,<regexp>,<encoding>,<maxlines>] ... why do i need to monitor size and lines of a log file ?

Is there any way to monitor a var/log/file contents ? and exclude what ever i dont want to see ? or simply create a perl/sh script and add it as a trigger/item ?

Thanks

[Colttt]

ehm whats the problem?
add the zabbix-user to the group adm and try this:

 log[/var/log/syslog,Error]

now zabbix say when come an Expression like Error to the syslog

[govath]

Hi Shadow,

Is not a problem im just trying to monitor a log file in a linux machine.

What about trigger ? expressions ?
What are the steps should i take to create a complete pattern to monitor a log file .

Thanks

[Colttt]

take a look at this: http://www.zabbix.com/documentation/...ile_monitoring

[govath]

Yes i looked that already

But is not clear ... its very general

[Colttt]

hello,

ok say which file do you like to parse

[govath]

I want to monitor a simple syslog log file under linux...

[jroberson]

I think the real question is "What are you looking for in this log file?" Are you looking for a keyword of "Error" (see Shad0w's first reply and just change the name of the file). If you want Zabbix to just read the whole file then you don't need the ", <filter>" portion of the item. Check out http://www.zabbix.com/documentation/...l/config/items and you can find the definition of the "log" items. You can also use triggers to find text in the log file as well, I think you can... I've not tried that, but I believe the capability is there.