Behavior of Zabbix w.r.t Log Files

[Umair]

As far as i have studied the Zabbix documentation, The monitoring of Log files is infact the statistical analysis of the log files.
Like, the size of Log files, it's existance, any string extracted (to an extent) etc.

How is Zabbix able to monitor the contents of the files.
For continuous warnings and exceptions being raised, how are we able to monitor each unique warning/error.

Like, i would want an Alarm to be raised, if the Log file is populated by any warning or an error.

How eactly can we handle such type of a situation in Zabbix ?

[NOB]

Hi,

in ZABBIX you receive all entries in all logfiles you monitor - this
part we don't like. It's not funny to have all entries of all logfiles
of all servers in the ZABBIX database.

Then you create a trigger for certain patterns.
If a trigger (very flexible in ZABBIX) is true, you can base
actions (alarms, SMS, E-Mail, ...) on it.

HTH,

Norbert.

[Umair]

hmmm..
i understand your point.

My log file is updated with warnings/errors like,

java.io.URL Exception
java.io.URLConnection Exception

The log file extends to a size of 1 GB sometimes...
I can use the following Item for searching a specific string (eg. java.io.URL)

vfs.file.regmatch[/etc/zabbix/text,java.io.URL]

This would be an example of an Item which i configured.
But this is not intelligent enough.
I will get the first occurance of the text "java.io.URL".

How would i be able to get only the latest data (in the logs) filtered out ?