[Xymon] alerting on log messages

[Colin Coe]

Hi Jeremy

What I'm finding is that I'm getting SMS alerts from Xymon about lines in
/var/log/messages such as "Failed to evaluate"," Failed to fetch", and
"Failed to calculate" which are normal for the application we're running.
I only want SMS alerts about the Oracle error and failed to log o/off
resource.

Thanks

On Wed, Sep 18, 2019 at 1:37 PM Jeremy Laidman <jeremy at laidman.org> wrote:

> "After picking out the "trigger" lines, any remaining space up to the
> maximum size is filled in with the most recent entries from the logfile."
>
> So it will include what you request as well as whatever else that will fit.
>
>
> On Wed, 18 Sep 2019 at 09:32, Colin Coe <colin.coe at gmail.com> wrote:
>
>> Hi all
>>
>> I have this entry in client-local.cfg
>> ---
>> [host=test_server_41]
>> log:/var/log/messages:1024000
>> ignore "%(Failed to fetch|Failed to parse|Failed to evaluate)"
>> trigger "%(ORA-04091|Failed to log off resource|Failed to log on
>> resource)"
>> ---
>>
>> And in analysis.cfg I have:
>> ---
>> HOST= test_server_41
>>     LOG /var/log/messages %(ORA-04091|Failed to log off resource|Failed
>> to log on resource) IGNORE=OCS color=red
>> ---
>>
>> Needless to say I'm getting alerts for more than just "ORA-04091",
>> "Failed to log off resource", and "Failed to log on resource".
>>
>> Any ideas what I'm doing wrong?
>>
>> Thanks
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20190918/69ea8c37/attachment.htm>