The way check_log works is to compare the current log vs. the log at the
time the last check was run so that behaviour is "normal"... I don't
recall if I changed this or not, but I have the output set to summarize
the number of instances matches, and alert based on that value, so the
check becomes effectively "this many alerts over this timeperiod". IMO
this plugin is really only useful for this method.
Extending this in perl to foreach over the search pattern, and generate
an alert directly (via the CGI/command file) instead of having the
return value return state and Nagios generate the alert directly... is
simple (if unorthodox). That's one way I can think of off hand that
would let you fire the check at scheduled time intervals, and still have
a single alert generated for _each_ entry in the log since the last
check. At the same time, it'd be smaller/faster to just use a diff
since the last check, vs the entire file (gets bloated/slow with a huge
number of hosts, esp. if they go log-happy).
/eli
Julien Ford wrote:
Hello,
I'm monitoring a log file with the check_log plugin.
The plugin tries to find patterns in the log file and
if it finds, sends an alert to the nagios server. In
nagios this service is volatile,passive and has a
"max_check_attempts" to 1.
My trouble is when there are two or more alerts for
the same service, only the last is show in the web
interface and only this one can by acknowledge.
Is it possible to show in the web interface all alerts
and to acknowledge them independently ? If the last
alert is acknowledged is it possible that the service
become OK only if there isn't any previous
unacknowledged alert ?
Thanks.
Regards,
Julien
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=k&kid0944&bid$1720&dat1642
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
