[Xymon] monitoring /var/log/messages for new occurence of a string

Nicole Beck nskyrca at syr.edu
Mon Oct 8 19:35:04 CEST 2012

I just haven't had a chance to test it much.  If I recall correctly, it didn't monitor everything that we currently monitor with big brother.  I'll have to investigate it further.


From: Larry Barber [mailto:lebarber at gmail.com]
Sent: Friday, October 05, 2012 4:28 PM
To: Nicole Beck
Cc: xymon at xymon.com
Subject: Re: [Xymon] monitoring /var/log/messages for new occurence of a string

Is there some reason you can't use a Xymon client?

Larry Barber
On Fri, Oct 5, 2012 at 2:00 PM, Nicole Beck <nskyrca at syr.edu<mailto:nskyrca at syr.edu>> wrote:
The answer to this is probably in the archives already, but I didn't find it.

I'm running Xymon 4.2.3 server on RHEL, and running Big Brother on the clients.  I setup the bb-msgstab file on a Linux client to alert for a specific string in /var/log/messages.  What I'm seeing is that anytime /var/log/messages is updated, we get an alert for the string we are testing for, even if  that string occurred hours ago.    Is there a way to parse the file to only send an alert if it is a new occurrence of the string?  We only rotate this file once a week, so we might get an alert on something that's a day old.

Nicole Beck

Xymon mailing list
Xymon at xymon.com<mailto:Xymon at xymon.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20121008/f0cfb106/attachment.html>

More information about the Xymon mailing list