Hi Mike, i have no answer to your question why the text is being cut off, maybe the string with the "%" inside ends up somewhere in a printf command, so the "%" is treated like part of a format string. Look at the notification command of contact_group Support for that. But what i saw is the is_volatile option in your template. You should set it to 1, because each time you read the logfile, you remove the cause of the alert by not reading the same lines of the logfile again. If you get an alert when you run check_log next time, then another match has been found which must be treated as a separate event.
Greetings from munich, Gerhard > Here is the service check command: > > define service { > use Sensor-Log > hostgroup_name Firewalls > service_description Check_Log > check_command > check_log!/var/log/messages!/usr/local/nagios/var/PIX-Deny.log!"Deny" > register 1 > } > > Here is the template that I am using: > > define service{ > > name Sensor-Log > is_volatile 0 > max_check_attempts 1 > normal_check_interval 1 > retry_check_interval 1 > passive_checks_enabled 0 > active_checks_enabled 1 > check_period 24x7 > parallelize_check 1 > obsess_over_service 1 > check_freshness 0 > event_handler_enabled 0 > flap_detection_enabled 0 > process_perf_data 1 > retain_status_information 1 > retain_nonstatus_information 1 > contact_groups Support > notification_interval 0 > notification_period 24x7 > notification_options w,c > notifications_enabled 0 > register 0 > } > > Here is my check command: > > define command { > command_name check_log > command_line $USER1$/check_log -F $ARG1$ -O $ARG2$ > -q $ARG3$ > > > Thanks! > > Mike > > > -----Original Message----- > From: James Turnbull [mailto:[EMAIL PROTECTED] > Sent: Friday, March 03, 2006 6:33 PM > To: Mike Koponick > Cc: Nagios Users > Subject: Re: [Nagios-users] Check_Log > > Mike Koponick wrote: > > > > I wanted to say thanks to all who responded to my question > regarding > > parsing syslog files. > > > > > > > > Thanks! > > > > > > > > But, I was wondering about check_log. It seems that it > would work for > > my environment. However I see that I have run into a snag of sorts. > > > > > > > Can you post the command/etc you are using check_log in to > parse the log? > > Regards > > James Turnbull > > -- > James Turnbull <[EMAIL PROTECTED]> > --- > Author of Pro Nagios 2.0 > (http://www.amazon.com/gp/product/1590596099/) > > Hardening Linux > (http://www.amazon.com/gp/product/1590594444/) > --- > PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40) > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking > scripting language that extends applications into web and > mobile media. Attend the live webcast and join the prime > developer group breaking into this new coding territory! > http://sel.as-us.falkag.net/sel?cmd___________________________ > ____________________ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS > when reporting any issue. > ::: Messages without supporting info will risk being sent to /dev/null > > > ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null