Monitoring a text file from Windows

[rpittom]

I'm running into an issue that seems consistent across many servers.

In attempting to setup an Item that does something like the following:

log[D:\Application\Log\file.log,FAILED]

it does an initial scan of the file but after that it does not record any changes made to the file.

I tried changing the Item then to the following:

log[D:\Application\Log\file.log]

and changed the trigger to the following:

{Template:log[D:\Application\Log\file.log].str("FAILED")}=1

Still the Latest Data is showing it is not updating past the initial update.

Nothing in the setup seems to be wrong so I'm thinking it's an issue with how our Windows servers are permissioned. The file has to be accessible by the agent as it reads it the first time.

In all these examples data is not appending to the file it is merely replacing what is in the log file.

[alientm]

my example:

Key:

log[D:\jHost\log\jHost.log,time-out]

Trigger:

{ICAR:log[D:\jHost\log\jHost.log,time-out].strlen()}>0 and {ICAR:log[D:\jHost\log\jHost.log,time-out].nodata(10m)}=0

Zabbix search expressions "time-out" in log file "jHost.log", when it hits displays PROBLEM, if for the next 10 minutes will not appear word "time-out" in file jHost.log, change the status to OK.

Me it works.