Hi
I am using the SEC to work with NAGIOS for matching the pattern of my log
messages.
type=SingleWithSuppress
ptype=RegExp
pattern=(\S+) diameterBeClient(\S+) NOTICE: {(\S+)} Com: Open for application
service via peer '(\S+)'. A connection to a peer has reached the \"Open\" state
and is now available for application usage
desc=diameterBeClient$2 - NOTICE: {$3} Com: Open for application service via
peer '$4'. A connection to a peer has reached the \"Open\" state and is now
available for application usage
action=shellcmd /usr/local/nagios/libexec/eventhandlers/submit_check_result $1
snmp_traps MAJOR "%s"
window=60
And the exact log messages is
Thu Oct 18 2012 14:20:43 NCC-V01-mgmt diameterBeClient(11441) NOTICE: {979320}
Com: Open for application service via peer 'testing.com'. A connection to a
peer has reached the \"Open\" state and is now available for application usage.
Thu Oct 18 2012 14:20:43 NCC-V02-mgmt diameterBeClient(11441) NOTICE: {979320}
Com: Open for application service via peer 'testing.com'. A connection to a
peer has reached the \"Open\" state and is now available for application usage.
During my testing, I noticed that the first message from NCC-V01-mgmt can be
matched and the shell command is being triggered, however, the 2nd message from
NCC-V02-mgmt) didn't. Any idea on how I can configure the SEC in order to match
the above pattern for different host?
Please help
paul
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
