On Thu, 18 Oct 2012, Paul Sun wrote:
Hi
I am using the SEC to work with NAGIOS for matching the pattern of my log
messages.
type=SingleWithSuppress
ptype=RegExp
pattern=(\S+) diameterBeClient(\S+) NOTICE: {(\S+)} Com: Open for application service via
peer '(\S+)'. A connection to a peer has reached the \"Open\" state and is now
available for application usage
desc=diameterBeClient$2 - NOTICE: {$3} Com: Open for application service via peer '$4'. A
connection to a peer has reached the \"Open\" state and is now available for
application usage
action=shellcmd /usr/local/nagios/libexec/eventhandlers/submit_check_result $1 snmp_traps
MAJOR "%s"
window=60
And the exact log messages is
Thu Oct 18 2012 14:20:43 NCC-V01-mgmt diameterBeClient(11441) NOTICE: {979320} Com: Open
for application service via peer 'testing.com'. A connection to a peer has reached the
\"Open\" state and is now available for application usage.
Thu Oct 18 2012 14:20:43 NCC-V02-mgmt diameterBeClient(11441) NOTICE: {979320} Com: Open
for application service via peer 'testing.com'. A connection to a peer has reached the
\"Open\" state and is now available for application usage.
During my testing, I noticed that the first message from NCC-V01-mgmt can be
matched and the shell command is being triggered, however, the 2nd message from
NCC-V02-mgmt) didn't. Any idea on how I can configure the SEC in order to match
the above pattern for different host?
add the hostname as part of your desc field. Without that all your logs
are being treated as being the same.
David Lang
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
