<div dir="ltr">You rock!<div><br></div><div style>One last question, my analysis.cfg entry seems to be wrong, xymon not alerting for below entry which has backtrick.</div><div style><br></div><div style> LOG %/mnt/logs/access.`date +%Y-%m-%d`.log "%Exception:" COLOR=red<br>

</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 12, 2013 at 8:03 PM, Michael Beatty <span dir="ltr"><<a href="mailto:Michael.Beatty@sherwin.com" target="_blank">Michael.Beatty@sherwin.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div><tt>Actually.... I didn't know you had
        to close the backticks after the message size either... My
        original reply was a typo, I thought it should have gone after
        the ".log"  Hmm??? If it works, it works I guess.<br>
        <br>
        For your second question, it can be done, but not the way you
        have shown.  the client-local file won't work with multiple
        hostnames.  What id does work on, however, is a CLASS names
        which are defined in your hosts.cfg.<br>
        <br>
        So in your hosts.cfg file:<br>
        1.2.3.1    server1  # CLASS:myclass<br>
        1.2.3.2    server2  # CLASS:myclass<br>
        1.2.3.3    server3  # CLASS:myclass<br>
        <br>
        In your client-local.cfg<br>
        [myclass]<br>
        log:....<br>
        <br>
        <br>
      </tt><div class="im">
      <pre cols="72">Michael Beatty
Sherwin-Williams
IT Analyst/Developer
<a href="mailto:michael.beatty@sherwin.com" target="_blank">michael.beatty@sherwin.com</a>
216-515-7374
</pre></div><div><div class="h5">
      On 04/12/2013 08:59 AM, deepak deore wrote:<br>
    </div></div></div><div><div class="h5">
    <blockquote type="cite">
      <div dir="ltr">
        <div>
          <div>
            <div>Hi Michael, this worked! <br>
            </div>
            Thanks a ton. I didnt know that we have to close the
            backtick after the message size.<br>
          </div>
          One more question, can I add multiple servers for common log
          file monitoring like below?<br>
          <br>
          [server1,server2,server3]<br>
        </div>
        log: .....<br>
        <div><br>
        </div>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">On Fri, Apr 12, 2013 at 5:03 PM,
          Michael Beatty <span dir="ltr"><<a href="mailto:Michael.Beatty@sherwin.com" target="_blank">Michael.Beatty@sherwin.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <div><tt>Try:<br>
                  <br>
                  log:`find /mnt/logs/access.$(date
                  +%Y-%m-%d).log:10240`<br>
                  <br>
                </tt>
                <pre cols="72">Michael Beatty
Sherwin-Williams
IT Analyst/Developer
<a href="mailto:michael.beatty@sherwin.com" target="_blank">michael.beatty@sherwin.com</a>
216-515-7374
</pre>
                <div>
                  <div> On 04/12/2013 06:20 AM, deepak deore
                    wrote:<br>
                  </div>
                </div>
              </div>
              <blockquote type="cite">
                <div>
                  <div>
                    <div dir="ltr">Xymon version: - Xymon 4.3.10<br>
                      OS: - Ubuntu 12.04 LTS<br>
                      <br>
                      I am using the below entry but it is not
                      converting the date command to the value.<br>
                      <div><br>
                        [server-name]<br>
                        log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240<br>
                        ignore INFO<br>
                        trigger SEVERE<br>
                        <br>
                      </div>
                      <div>I tried many things but no luck, on the log
                        page I see the date command as it is instead of
                        the actual date value.: - <br>
                        <br>
                        log:`/mnt/logs/access.`date
                        +%Y-%m-%d`.log`:10240<br>
                        log:$(/mnt/logs/access.`date
                        +%Y-%m-%d`.log):10240<br>
                        log:$(echo /mnt/logs/access.`date
                        +%Y-%m-%d`.log):10240<br>
                        log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240<br>
                      </div>
                    </div>
                    <br>
                    <fieldset></fieldset>
                    <br>
                  </div>
                </div>
                <pre>_______________________________________________
Xymon mailing list
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a>
</pre>
              </blockquote>
              <br>
              <br>
            </div>
            <br>
            _______________________________________________<br>
            Xymon mailing list<br>
            <a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
            <a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
    <br>
  </div></div></div>

</blockquote></div><br></div>