I have Zabbix set up to monitor the log file one of our processes outputs. In the log file it looks for the string "CRITICAL event=process failure".
Since we originally set this up we have created additional events like "source failure" and "data failure". To support this change I need to update the trigger to look for "CRITICAL event=" rather than a specific event. When I make this change it causes Zabbix to reprocess the entire log file and throw alerts for tons of old entries.
Is there a way to change this trigger and tell Zabbix to continue from the current point in the log file rather than starting from the beginning again?
Thanks for the help!
Since we originally set this up we have created additional events like "source failure" and "data failure". To support this change I need to update the trigger to look for "CRITICAL event=" rather than a specific event. When I make this change it causes Zabbix to reprocess the entire log file and throw alerts for tons of old entries.
Is there a way to change this trigger and tell Zabbix to continue from the current point in the log file rather than starting from the beginning again?
Thanks for the help!