[hobbit] Problem to check logs with Hobbit

[Kauffman, Tom]

On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're interested in.

Tom

-----Original Message-----
From: L.M.J [mailto:linuxmasterjedi at free.fr]
Sent: Wednesday, September 10, 2008 11:42 AM
To: hobbit at hswn.dk
Subject: Re: [hobbit] Problem to check logs with Hobbit

Hi once again

>
> Hello,
>
>   I've posted a couple of month but after hours & hours of tests, I still
> can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
> and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.
>
> On my client computer called "Suspendisse" :
>     $ cat localclient.cfg
>        ...
>        # LOG
>        LOG /var/log/messages MARK COLOR=RED
>        ...
>     $

 I re-up this topic because I can't find a way to monitor any log files with Hobbit on any clients (Linux,
AIX, Solaris) Is there an example somewhere I can follow (I already man'ed and google'd).

  Thanks by advance