Xymon Mailing List Archive search

XyMon msg metric - how to check log entries only since last check?

2 messages in this thread

list Andrey Chervonets · Wed, 01 Feb 2012 16:26:11 +0200 ·
Is it possible to setup xymon to check log-file (msg metric) only for new entries since last check (or 5 min)?
For now I see it is only possible to specify how much data in log-file xymon will parse.
But, depending on activities it can be big or small - so the same bad entry can be reported for 2 or more check intervals and some (when quite much activities in log-file) can be missed.

Really I do not realise how it can be implemented w/o writing timestamp tags to that log-file,
but may be You know some secret?

-- 
Best regards,

Andrey Chervonets
SIA CoMinder
www:http://www.cominder.eu/
list Andrey Chervonets · Thu, 09 Feb 2012 13:29:19 +0200 ·
One my friend using old Hobbit 4.x version told that it always check new entries only.
I am using XyMon 4.3.4.

Can anyone test your versions/installation for this behaviour?


In clientclient-local.cfg I has found:

# The following configuration items are currently possible:
#   "log:FILENAME:MAXDATA"
#       Monitor the text-based logfile FILENAME, and report  back at most MAXDATA bytes. The Xymon client will
#       only report back entries generated during the past 30 minutes, so MAXDATA is an upper limit.

But my exprience show - it just reads up to MAXDATA and analyse and show all, not just last 30 min.
Or may be it expected timestamp in file in some known format?
If yes, then more questions:
a) Is it possible to define ather timestamp formats xymon can understand?
b) is it possible  to change check interval 30 min to some other - for ALL logs/hosts or just some?

Thanks in advance!

Best regards,

Andrey Chervonets
http://www.cominder.eu/
quoted from Andrey Chervonets


On 05.02.2012 13:00, xymon-request at xymon.com wrote:
Is it possible to setup xymon to check log-file (msg metric) only for
new entries since last check (or 5 min)?
For now I see it is only possible to specify how much data in log-file
xymon will parse.
But, depending on activities it can be big or small - so the same bad
entry can be reported for 2 or more check intervals and some (when quite
much activities in log-file) can be missed.

Really I do not realise how it can be implemented w/o writing timestamp
tags to that log-file,
but may be You know some secret?

-- 
Best regards,

Andrey Chervonets
SIA CoMinder
www:http://www.cominder.eu/