[Xymon] alerting on log messages

[Jeremy Laidman]

"After picking out the "trigger" lines, any remaining space up to the
maximum size is filled in with the most recent entries from the logfile."

So it will include what you request as well as whatever else that will fit.


On Wed, 18 Sep 2019 at 09:32, Colin Coe <colin.coe at gmail.com> wrote:

> Hi all
>
> I have this entry in client-local.cfg
> ---
> [host=test_server_41]
> log:/var/log/messages:1024000
> ignore "%(Failed to fetch|Failed to parse|Failed to evaluate)"
> trigger "%(ORA-04091|Failed to log off resource|Failed to log on resource)"
> ---
>
> And in analysis.cfg I have:
> ---
> HOST= test_server_41
>     LOG /var/log/messages %(ORA-04091|Failed to log off resource|Failed to
> log on resource) IGNORE=OCS color=red
> ---
>
> Needless to say I'm getting alerts for more than just "ORA-04091", "Failed
> to log off resource", and "Failed to log on resource".
>
> Any ideas what I'm doing wrong?
>
> Thanks
>
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20190918/75ecfdc4/attachment.htm>