[Xymon] Monitoring logfiles with changing names on a linux client

[Becker Christian]

Hello out there,


i did already search for this, but couldn't' find the right things; further my perl regexp knowledge is not the best.


What I have:
I have a linux client with xymon agents up and running, reporting his data to the Xymon server -> this is working fine.
This linux client serves an application that creates 6 new different logfiles every day -> that's my problem.
The names of the lofgiles are like this: Log.File_ABC#_YYYYMMDD_######.log
The first # in the name could be numbers fom 1 to 6.
YYYYMMDD is the actual day date, like 20160414.
The ###### block is another numeric identifier, like 050601 or similar, which also changes every day, but not following any rule.


What I want:
My goal is to check those logiles for the keyword ERROR and let Xymon go red if this keyword occurs.
What I'm looking for is the necessary config on both the client (in localclient.cfg) and the xymon server (in client-local.cfg and analysis.cfg) using regexp.
I'm thinking about something like this to have in the linux client's localclient.cfg:
LOG `ls -1 Log.File_ABC*_`date +%Y%m%d\`_*.log`
But I'm not sure about the syntax here.
Further I need to know if and how this could be implemented in client-local.cfg and analysis.cfg  on the Xymon server.

Anyone any idea?

Regards
Christian

Christian Becker
IT-Services

Christian.Becker at rhein-zeitung.net<mailto:Christian.Becker at rhein-zeitung.net>
_________________________________
Mittelrhein-Verlag GmbH
August-Horch-Straße 28
D-56070 Koblenz
Verleger und Geschäftsführer: Walterpeter Twer
Reg.-Gericht Koblenz HRB 121
Finanzamt Koblenz Str.Nr. 22 65 10 285 2
www.rhein-zeitung.de<http://www.rhein-zeitung.de/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160614/33c659fe/attachment.html>