Scot Kreienkamp wrote:
Hi everyone,
Does anyone have any advice on messages logging? I have a log for postgres that gets so many lines written in a day there’s no way it can transfer all of them to the Xymon server. I don’t need any of that traffic anyway. The only lines I need are ones that contain a few specific words. So I put this in client-local.cfg:
[servername]
log:/var/log/postgres.log:10240
ignore .*
trigger %(FATAL|Fatal|FAIL|Fail|fail|Error|ERROR|error|Error|timestamp|deadlock|Deadlock|password authentication failed|pg_hba.conf|invalid magic number)
log:/var/log/messages:10240
ignore %(postgres|RMS Printing Subsystem|connection received|disconnection|connection authorized)
trigger %(FAIL|Fail|fail|Error|ERROR|error|Error|timestamp|deadlock|Deadlock|password authentication failed|pg_hba.conf|invalid magic number)
file:/etc/passwd
However, that doesn’t seem to produce any log messages from the postgres log even when it should match one of the triggers. Client and server is version 4.3.17.
I appreciate any ideas anyone has, or if someone has already done this if you could share your config I’d like to see how you did it.
You need ignore OR trigger, not both. I find that logfetch crashes under certain circumstances if you use both, but in any case, they are functionally exclusive if you think about it.
--
Andy