Xymon Mailing List Archive search

alerting on log messages

list Colin Coe
Wed, 18 Sep 2019 14:17:58 +0800
Message-Id: <user-09148906fd2c@xymon.invalid>

Hi Jeremy

What I'm finding is that I'm getting SMS alerts from Xymon about lines in
/var/log/messages such as "Failed to evaluate"," Failed to fetch", and
"Failed to calculate" which are normal for the application we're running.
I only want SMS alerts about the Oracle error and failed to log o/off
resource.

Thanks

On Wed, Sep 18, 2019 at 1:37 PM Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:
"After picking out the "trigger" lines, any remaining space up to the
maximum size is filled in with the most recent entries from the logfile."

So it will include what you request as well as whatever else that will fit.


On Wed, 18 Sep 2019 at 09:32, Colin Coe <user-5b250cd7a540@xymon.invalid> wrote:
Hi all

I have this entry in client-local.cfg
---
[host=test_server_41]
log:/var/log/messages:1024000
ignore "%(Failed to fetch|Failed to parse|Failed to evaluate)"
trigger "%(ORA-04091|Failed to log off resource|Failed to log on
resource)"
---

And in analysis.cfg I have:
---
HOST= test_server_41
    LOG /var/log/messages %(ORA-04091|Failed to log off resource|Failed
to log on resource) IGNORE=OCS color=red
---

Needless to say I'm getting alerts for more than just "ORA-04091",
"Failed to log off resource", and "Failed to log on resource".

Any ideas what I'm doing wrong?

Thanks