Logfiles Monitoring

[Mohammadjuve]

Hello All,

I try to monitor the Log files on Linux Servers in the same network so I've made the following changes:

Agent Side:

-Hostname' parameter matches the host name in the frontend.

-ervers in the 'ServerActive' parameter are specified for the processing of active checks.

-RefreshActiveChecks=120 in zabbix_agentd.conf.

-give the Zabbix User access to the monitored Files.

Server

Aktive Server

listen port 10051

item:

like the photo in the attachment

trigger

{xxxx:log[/var/log/syslog,zabbixtest].nodata(180)}=0

I've wrote also this command

logger zabbixtest

but I still get no Vlaues or triggers !! any Idea

Thank you

[Mohammadjuve]

No one have an Idea !!

[aigars.kadikis]

Hello, Mohammadjuve!

Is this the only item on host defined?
Do you have any other signs (passive items configured) which proves that some relation has established between server and agent?

About log monitoring..
Pease test communication from zabbix agent to zabbix server. Test if zabbix agent can deliver data to zabbix server:

nmap -p 10051 ip.of.zabbix.server

P.S. If you have no triggers configured then you can see all data received under Monitoring -> Latest data

Regards,
Aigars

[Mohammadjuve]

Hello Aigars,
Thank you for your reply.
the host has more than 500 passive checks, the only thing that annoys me is the active check.

the connection between agent and Server is ok
the result of nmap command is:

Host is up (0.00047s latency).
PORT STATE SERVICE
10051/tcp open unknown

Regards,

[aigars.kadikis]

Hi,

Let's try a little different approach. Please try to move to the zabbix user:

su -s /bin/bash zabbix

Create some content which will definitely be owned by zabbix

echo "some zabbixtest" >> /tmp/logfile

Configure /tmp/logfile as log file in zabbix. Make sure you wait for the configuration to synchronize (60 seconds by default). Look for latest data under Monitoring -> Latest data
I hope the data came..

But if not..
What operating system do you have? Do you have SELinux enabled?

getenforce

What zabbix_agentd.log says?

Regards,

[Mohammadjuve]

Hello Aigars,
it was a Silly fault, I've wrote the wrong ip address for ServerActive.
every thing works Super locally,
i'm trying now to monitor the log files for server in far sites.

Big Regards,

[aigars.kadikis]

Hello Aigars,
it was a Silly fault, I've wrote the wrong ip address for ServerActive.
every thing works Super locally,
i'm trying now to monitor the log files for server in far sites.

Big Regards,

Thanks for feedback!