Xymon Mailing List Archive search

monitoring /var/log/messages for new occurence of a string

list Nicole Beck
Mon, 8 Oct 2012 17:35:04 +0000
Message-Id: <user-040fe1c92bd2@xymon.invalid>

I just haven't had a chance to test it much.  If I recall correctly, it didn't monitor everything that we currently monitor with big brother.  I'll have to investigate it further.

Thanks,
Nicole

From: Larry Barber [mailto:user-6ef9c2864140@xymon.invalid]
Sent: Friday, October 05, 2012 4:28 PM
To: Nicole Beck
Cc: xymon at xymon.com
Subject: Re: [Xymon] monitoring /var/log/messages for new occurence of a string

Is there some reason you can't use a Xymon client?

Thanks,
Larry Barber
On Fri, Oct 5, 2012 at 2:00 PM, Nicole Beck <user-80034b0579c6@xymon.invalid<mailto:user-80034b0579c6@xymon.invalid>> wrote:
Hi,
The answer to this is probably in the archives already, but I didn't find it.

I'm running Xymon 4.2.3 server on RHEL, and running Big Brother on the clients.  I setup the bb-msgstab file on a Linux client to alert for a specific string in /var/log/messages.  What I'm seeing is that anytime /var/log/messages is updated, we get an alert for the string we are testing for, even if  that string occurred hours ago.    Is there a way to parse the file to only send an alert if it is a new occurrence of the string?  We only rotate this file once a week, so we might get an alert on something that's a day old.

Thanks!
Nicole Beck