<div dir="ltr">This was really a great help, everything is working fine now. <br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 12, 2013 at 9:16 PM, Michael Beatty <span dir="ltr"><<a href="mailto:Michael.Beatty@sherwin.com" target="_blank">Michael.Beatty@sherwin.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div><tt>You don't need to do the date
calculation in the analysis, just need to provide the regular
expression to match it.<br>
<br>
The client-local.cfg is telling your client what data to send,
but supply the date string in the "find" statement, the client
is going going to return data from those files. So once the
data gets to the server, it will only be for today's data. For
example, the client data will only have. <br>
<br>
/mnt/logs/access.2013-04-12.log<br>
<br>
So your regex in analysis.cfg only needs<br>
LOG %/mnt/logs/access\.[0-9]*-[0-9]*-[0-9]*\.log<span class="HOEnZb"><font color="#888888"><br>
<br>
</font></span></tt><span class="HOEnZb"><font color="#888888">
<pre cols="72">Michael Beatty
</pre></font></span><div><div class="h5">
On 04/12/2013 11:24 AM, deepak deore wrote:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr">You rock!
<div><br>
</div>
<div>One last question, my analysis.cfg entry seems to
be wrong, xymon not alerting for below entry which has
backtrick.</div>
<div><br>
</div>
<div> LOG %/mnt/logs/access.`date +%Y-%m-%d`.log
"%Exception:" COLOR=red<br>
</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Fri, Apr 12, 2013 at 8:03 PM,
Michael Beatty <span dir="ltr"><<a href="mailto:Michael.Beatty@sherwin.com" target="_blank">Michael.Beatty@sherwin.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div><tt>Actually.... I didn't know you had to close the
backticks after the message size either... My original
reply was a typo, I thought it should have gone after
the ".log" Hmm??? If it works, it works I guess.<br>
<br>
For your second question, it can be done, but not the
way you have shown. the client-local file won't work
with multiple hostnames. What id does work on,
however, is a CLASS names which are defined in your
hosts.cfg.<br>
<br>
So in your hosts.cfg file:<br>
1.2.3.1 server1 # CLASS:myclass<br>
1.2.3.2 server2 # CLASS:myclass<br>
1.2.3.3 server3 # CLASS:myclass<br>
<br>
In your client-local.cfg<br>
[myclass]<br>
log:....<br>
<br>
<br>
</tt>
<div>
<pre cols="72">Michael Beatty
Sherwin-Williams
IT Analyst/Developer
<a href="mailto:michael.beatty@sherwin.com" target="_blank">michael.beatty@sherwin.com</a>
216-515-7374
</pre>
</div>
<div>
<div> On 04/12/2013 08:59 AM, deepak deore
wrote:<br>
</div>
</div>
</div>
<div>
<div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>Hi Michael, this worked! <br>
</div>
Thanks a ton. I didnt know that we have to
close the backtick after the message size.<br>
</div>
One more question, can I add multiple servers
for common log file monitoring like below?<br>
<br>
[server1,server2,server3]<br>
</div>
log: .....<br>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Fri, Apr 12, 2013 at
5:03 PM, Michael Beatty <span dir="ltr"><<a href="mailto:Michael.Beatty@sherwin.com" target="_blank">Michael.Beatty@sherwin.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div><tt>Try:<br>
<br>
log:`find /mnt/logs/access.$(date
+%Y-%m-%d).log:10240`<br>
<br>
</tt>
<pre cols="72">Michael Beatty
Sherwin-Williams
IT Analyst/Developer
<a href="mailto:michael.beatty@sherwin.com" target="_blank">michael.beatty@sherwin.com</a>
216-515-7374
</pre>
<div>
<div> On 04/12/2013 06:20 AM, deepak
deore wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Xymon version: - Xymon
4.3.10<br>
OS: - Ubuntu 12.04 LTS<br>
<br>
I am using the below entry but it is
not converting the date command to
the value.<br>
<div><br>
[server-name]<br>
log:/mnt/logs/access.`date
+%Y-%m-%d`.log:10240<br>
ignore INFO<br>
trigger SEVERE<br>
<br>
</div>
<div>I tried many things but no
luck, on the log page I see the
date command as it is instead of
the actual date value.: - <br>
<br>
log:`/mnt/logs/access.`date
+%Y-%m-%d`.log`:10240<br>
log:$(/mnt/logs/access.`date
+%Y-%m-%d`.log):10240<br>
log:$(echo /mnt/logs/access.`date
+%Y-%m-%d`.log):10240<br>
log:/mnt/logs/access.$(date
+%Y-%m-%d).log:10240<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
Xymon mailing list
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a>
</pre>
</blockquote>
<br>
<br>
</div>
<br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<br>
</div></div></div>
</blockquote></div><br></div>