On 11/29/06, James Wade <user-659655b2ea05@xymon.invalid> wrote:
Basically, the developers want to monitor a web server log file which is
in debug mode. The file fills up to 10mb, then rotates to a date/time stamp.
They want to monitor for specific strings. Example: J2CA0056I
The problem is that if Hobbit is checking every 5 minutes, or even every 1
or
2 minutes, the error can feed by to fast for Hobbit to detect.
I haven't tried this myself, but it looks like swatch
(http://swatch.sourceforge.net) might be worth looking at. It watches
log files for you, and can execute actions based on search strings.
The action could be as simple as "echo J2CA0056I >> log-for-hobbit"
and have hobit watch that file, or possibly even exec a script that
fires off a hobbit report directly.
I don't know how swatch would handle the log rotation though.
Ralph Mitchell