RE: [hobbit] HowTo monitor log files

["Stuffle, David (Corporate)" <David.Stuffle (at) adesa.com>]

The client-local.cfg and the hobbit-clients.cfg need to be modified on
the Hobbit server.  You shouldn't have to change any files on the actual
client side.  Specify the file to monitor in client-local.cfg.  Specify
the color conditions in the hobbit-clients.cfg.  See documentation in
each file.
 
---client-local.cfg---
[server1]
log:/var/log/messages:10240
 
 
---hobbit-client.cfg---
HOST=server1
        LOG /var/log/messages abort COLOR=red
 
David


________________________________

From: Benoit list [mailto:mailinglist.benoit (at) gmail.com] 
Sent: Wednesday, June 04, 2008 3:34 PM
To: hobbit (at) hswn.dk
Subject: Re: [hobbit] HowTo monitor log files


Hello guys,
I encounter the same problem that "linuxmasterjedi" :s
My hobbit server says also "No files checked"

Do you have a good advise for this problem embarrassing ???

Thanks by advance

+++++++++++++++++++++++++++


2008/6/2 L.M.J <linuxmasterjedi (at) free.fr>:


	Hi,
	
	 I'm trying to monitor LOG files on a Linux OS via the Hobbit
client
	monitor 4.2.0. I have some issue : file information are not send
back to
	the server. I've checked the ML & the conf file :
	    #                             ************ IMPORTANT
***************
	    #   To monitor a logfile, you *MUST* configure both
client-local.cfg
	    #   and hobbit-clients.cfg. If you configure only the
client-local.cfg
	    #   file, the client will collect the log data and you can
view it in
	    #   the "client data" display, but it will not affect the
color of the
	    #   "msgs" status. On the other hand, if you configure only
the
	    #   hobbit-clients.cfg file, then there will be no log data
to inspect,
	    #   and you will not see any updates of the "msgs" status
either.
	
	 BTW, client-local.cfg & hobbit-clients.cfg does not exist
anymore ;).
	Anyway, I put this on my client side localclient.cfg file :
	
	       # FILE Check
	       FILE /var/log/messages  SIZE>0 MTIME<1200 yellow
	       FILE /var/log/messages  red     "timed out!"
	       FILE /var/log/messages  red     "abort!"
	
	       # LOG
	       LOG %/var/log/messages %(I/O|read).error COLOR=red
	
	 ll /var/log/messages
	  -rw-r----- 1 root adm 5530 May 29 16:25 /var/log/messages
	
	 Hobbit is in the "adm" group, it can read the file. So why my
Hobbit
	server keep saying "No files checked" ?
	
	  Thanks by advance!
	
	




-- 

<mailinglist.benoit - at - gmail!com>