Xymon Mailing List Archive search

monitoring /var/log/messages for new occurence of a string

list Ryan Novosielski
Mon, 8 Oct 2012 13:39:01 -0400
Message-Id: <user-1b804c9b4b5d@xymon.invalid>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It definitely works better, and monitors all the same things. You may
need to modify your external tests a little bit, but just because the
environment variables/names have just changed a little.

I've got a big selling point for you if you need one: you cannot
configure client settings centrally on the server side if you use a
Big Brother client. They will be ignored.

On 10/08/2012 01:35 PM, Nicole Beck wrote:
I just haven’t had a chance to test it much.  If I recall
correctly, it didn’t monitor everything that we currently monitor
with big brother. I’ll have to investigate it further.


Thanks,

Nicole


*From:*Larry Barber [mailto:user-6ef9c2864140@xymon.invalid] *Sent:* Friday,
October 05, 2012 4:28 PM *To:* Nicole Beck *Cc:* xymon at xymon.com *Subject:* Re: [Xymon] monitoring /var/log/messages for new
occurence of a string


Is there some reason you can't use a Xymon client?

Thanks, Larry Barber

On Fri, Oct 5, 2012 at 2:00 PM, Nicole Beck <user-80034b0579c6@xymon.invalid <mailto:user-80034b0579c6@xymon.invalid>> wrote:

Hi,

The answer to this is probably in the archives already, but I
didn’t find it.


I’m running Xymon 4.2.3 server on RHEL, and running Big Brother on
the clients.  I setup the bb-msgstab file on a Linux client to
alert for a specific string in /var/log/messages.  What I’m seeing
is that anytime /var/log/messages is updated, we get an alert for
the string we are testing for, even if  that string occurred hours
ago.    Is there a way to parse the file to only send an alert if
it is a new occurrence of the string?  We only rotate this file
once a week, so we might get an alert on something that’s a day
old.


Thanks!

Nicole Beck

- -- - ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlBzD7UACgkQmb+gadEcsb54fgCffOb1tL0U6zbBFUiYGovSxfsi
AlUAnAu73H8glQQ3YAd0Bzu8iOqw96en
=ovXt
-----END PGP SIGNATURE-----