Xymon Mailing List Archive search

Troubleshooting

4 messages in this thread

list Nick Pettefar · Tue, 11 Dec 2012 16:43:30 +0000 · 
We are not getting alerts for the word "error" appearing in
/var/adm/messages.  How would we go about troubleshooting this?

Regards,

Nick
list Chris Morris · Tue, 11 Dec 2012 16:50:20 -0000 · 
Do you want to match just "error" or error, Error and ERROR - it is down
to the regexp used in analysis.cfg provided you are monitoring the log
in client-local.cfg.

%error wuill match all instances. 

-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf
Of Nick Pettefar
Sent: 11 December 2012 16:44
To: xymon
Subject: [Xymon] Troubleshooting
▸ quoted from Nick Pettefar

We are not getting alerts for the word "error" appearing in
/var/adm/messages.  How would we go about troubleshooting this?

Regards,

Nick


**************************************************************************** 

The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). 

*****************************************************************************
list Larry Barber · Tue, 11 Dec 2012 10:55:08 -0600 · 
Do you have a rule in analysis.cfg telling Xymon to look for "error"? You
need one, it would look something like this:

CLASS=aix
    LOG /var/adm/messages "%(error|critical)" COLOR=red
IGNORE="%(vgptool|Cannot open logfile)"
    LOG /var/adm/messages "%(warning)" COLOR=yellow

Thanks,
Larry Barber
▸ quoted from Nick Pettefar


On Tue, Dec 11, 2012 at 10:43 AM, Nick Pettefar <user-2027539dd102@xymon.invalid> wrote:

We are not getting alerts for the word "error" appearing in
/var/adm/messages.  How would we go about troubleshooting this?

Regards,

Nick
list Ryan Novosielski · Tue, 11 Dec 2012 12:24:41 -0500 · 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

pcretest helps one to test whether or not they're on track with their
regex's (and Perl-compatible is the type of regex used here). It's
been awhile since I used it, but I believe you type a string you're
looking for and then enter the regex and it will tell you if it matches.

Incidentally, your opening message wasn't terribly clear -- I skipped
it 'cuz I wasn't sure what it meant.
▸ quoted from Chris Morris

On 12/11/2012 12:06 PM, user-e510f6c03e57@xymon.invalid wrote:
Do you want to match just "error" or error, Error and ERROR - it
is down to the regexp used in analysis.cfg provided you are
monitoring the log in client-local.cfg.

%error wuill match all instances.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Nick Pettefar Sent: 11 December 2012 16:44 To: xymon Subject: [Xymon] Troubleshooting

We are not getting alerts for the word "error" appearing in /var/adm/messages.  How would we go about troubleshooting this?

Regards,


Nick _______________________________________________ Xymon mailing list Xymon at xymon.com
▸ quoted from Chris Morris

****************************************************************************


The information contained in this email is intended only for the
use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender
by return email or call 01793 877777 and ask for the sender and
then delete it immediately from your system.Please note that
neither the RWE Group of Companies nor the sender accepts any
responsibility for viruses and it is your responsibility to scan
attachments (if any).

*****************************************************************************


- -- - ---- _  _ _  _ ___  _  _  _

|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDHbFUACgkQmb+gadEcsb6BnwCggcfktHZ0XwNXoGZsgaY3myty
wlkAniO08MGZULe0H6z+ONkO0t8vkOuQ
=C2JM
-----END PGP SIGNATURE-----