Hi,
I try to monitor /var/log/messages on my Linux hosts.
I have this problem:
How to send info that there was more than one line with error since last update?
I my messsage I only get one error that fired Trigger. But what if there was more errors? I could send more last values but then it will send old/irelevant errors.
Is there a way to to send in 1-9 last values since last last trigger was fired?
My setup:
Item
log["/var/log/messages","err|crit|alert|emerg",10]
Type: Zabbix agent (active)
Interval:60
Trigger
{host var_log_messsage Critical:log["/var/log/messages","err|crit|alert|emerg",10].nodata(50)}=0
Action (there is no recovery message. I want only one mail if there is a problem
Trigger: {TRIGGER.NAME}
Trigger status: {TRIGGER.STATUS}
Trigger severity: {TRIGGER.SEVERITY}
Hostname: {HOST.NAME1}
Host IP: {HOST.CONN1}
Event start date/time: {EVENT.DATE} {EVENT.TIME}
Current date/time: {DATE} {TIME}
Problem duration: {EVENT.AGE}
Item values:
First {ITEM.NAME1} ({HOST.NAME1}): {ITEM.VALUE1}
Last {ITEM.NAME1} ({HOST.NAME1}): {ITEM.LASTVALUE1}
Thanks for help in advance
I try to monitor /var/log/messages on my Linux hosts.
I have this problem:
How to send info that there was more than one line with error since last update?
I my messsage I only get one error that fired Trigger. But what if there was more errors? I could send more last values but then it will send old/irelevant errors.
Is there a way to to send in 1-9 last values since last last trigger was fired?
My setup:
Item
log["/var/log/messages","err|crit|alert|emerg",10]
Type: Zabbix agent (active)
Interval:60
Trigger
{host var_log_messsage Critical:log["/var/log/messages","err|crit|alert|emerg",10].nodata(50)}=0
Action (there is no recovery message. I want only one mail if there is a problem
Trigger: {TRIGGER.NAME}
Trigger status: {TRIGGER.STATUS}
Trigger severity: {TRIGGER.SEVERITY}
Hostname: {HOST.NAME1}
Host IP: {HOST.CONN1}
Event start date/time: {EVENT.DATE} {EVENT.TIME}
Current date/time: {DATE} {TIME}
Problem duration: {EVENT.AGE}
Item values:
First {ITEM.NAME1} ({HOST.NAME1}): {ITEM.VALUE1}
Last {ITEM.NAME1} ({HOST.NAME1}): {ITEM.LASTVALUE1}
Thanks for help in advance