The single string I find catches the most Linux log messages is "fail" .
I have it set to scan for it no matter the case. Other than that all
the other strings are tied to particular applications (backup software,
Oracle, etc.).
Hope that helps,
Bruce
Bruce White
Senior Enterprise Systems Engineer | Phone: X-XXX-XXX-XXXX | Fax: XXX-XXX-XXXX | user-58f975e8bf9d@xymon.invalid | http://www.fellowes.com/
Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf
Of user-c862b499d9fa@xymon.invalid
Sent: Tuesday, August 16, 2011 4:00 AM
To: xymon at xymon.com
Subject: [Xymon] Linux messages monitoring - best practice
Hi folks,
our company is switching from Solaris to Linux (Red Hat). And now I'm
curious what patterns do you have for system log file monitoring since
the messages and other files look slightly different from the ones in
Solaris.
Thanks
Torsten