Hernán Berman wrote:
hi guys, to analize logs you can use "sec.pl <http://sec.pl>"; this is a powerful open source tool
http://simple-evcorr.sourceforge.net/
Regards
HB
On Mon, Mar 3, 2014 at 10:17 AM, Neil Simmonds <user-feff97fabd3d@xymon.invalid <mailto:user-feff97fabd3d@xymon.invalid>> wrote:
Hi all,____
__ __
As far as I can see there is no built in way in Xymon to monitor a
log for the number of times a string has occurred in a specified
time period. Is this something that other people would find useful?
(even if it was only a count of occurrences within the last 30
minutes and not a configurable time). ____
__ __
Is there any chance something like this may be in a future release
Henrik?____
__ __
__ __
*Regards,*____
____
*Neil Simmonds*____
We also make use of the Simple Event Corrulator both on clients to analyze fast moving logs (and/or logs in real time) and also on the Xymon Server to analyze trap logs in the manner of http://cerebro.victoriacollege.edu/hobbit-trap.html (which is linked under Tips and Tricks on the Help pages).
We have a perl module that can be integrated with SEC which makes it possible to install SEC on clients completely independently from any Xymon Client software if necessary.
It is still a pain having to manage SEC rules locally on every client, but you can overcome this by keeping the rules on the Xymon server and use the Xymon download command from within SEC to keep these in sync.
--
Andy