Le Wed, 10 Sep 2008 13:34:46 -0400,
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :
On your hobbit server -
1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
ignore 3004-004
ignore 3004-035
ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240
2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
LOG /var/log/syslog %.*crit.su.*to.root red
LOG /var/log/syslog %.*crit.su yellow
LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow
Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.
Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.
Tom
Thanks both to Tom & T.J. Yang, I will try this out tomorrow