I am using this plugin for a while now and am facing a problem right now, Here is how my configuration file looks like,

@searches = (

#

Pattern1

# { tag => ‘Pattern1′, logfile => ‘/var/tmp/logfile1-log4j.log’, criticalpatterns => [ 'FATAL', 'Item limit per service exceeded', 'java.lang.OutOfMemoryError: Java heap space', 'ParserException', ], criticalexceptions => [ 'RESCODE=IDNOTFOUND', ], options => ‘sticky=900,noprotocol,nologfilenocry,supersmartscript’, script => sub { ( my $line = $ENV{CHECK_LOGFILES_SERVICEOUTPUT}) =~ s/\|/\;/g; print “$line found in $ENV{CHECK_LOGFILES_LOGFILE}”; return $ENV{CHECK_LOGFILES_SERVICESTATEID}; } },

#

Pattern2

# { tag => ‘Pattern2′, logfile => ‘/var/tmp/logfile2-log4j.log’, criticalpatterns => [ 'FATAL', 'ParserException', ], options => ‘sticky=900,noprotocol,nologfilenocry,supersmartscript’, script => sub { ( my $line = $ENV{CHECK_LOGFILES_SERVICEOUTPUT}) =~ s/\|/\;/g; print “$line found in $ENV{CHECK_LOGFILES_LOGFILE}”; return $ENV{CHECK_LOGFILES_SERVICESTATEID}; } },

);

I have 20-30 such entries in given file. The problem is, even though the pattern match occurs in any of the logfiles, the logfile name displayed is always the last pattern.

e.g. In above configuration, if their is one line found with ‘FATAL’ pattern in Pattern1 section, the alert text would still show the logfile name as /var/tmp/logfile2-log4j.log instead of /var/tmp/logfile1-log4j.log

do you see any issues with the way I am setting this up.

Thanks!

@searches = ( { options => ‘eventlogformat=”%w src:%s id:%i %m”‘, tag => ‘evt_app’, type => ‘eventlog’, eventlog => { eventlog => ‘application’, include => { source => ‘BizTalk Server 2006′, eventid => ['5429','5410','6912','6913','5753','10034','7184','5439','7221','5649','5773','5888','5777','5697','5652','5743','5740'], }, }, criticalpatterns => ‘.*’, });

The problem is, that i wanna catch all events Id =5429 or all events ID =5410, or all events Id=6912 , and so on….

how could be the best way to do that with out making all in separates files of course.

thanks in advance

I’m trying to figure out how the timeout works. I’m trying to get the check_logfiles script to die after 60 seconds. I’ve use the “-t 60″ option but it doesn’t seem to work. I’m sure I’m doing something wrong or I misunderstand what it is used for.

Thanks in advance as always.

Zudem reicht es mir wenn nur eine Datei den Eintrag besitzt, bzw. er muss nicht in beiden Dateien erscheinen.

Gibt es eine mögichkeit dies abzufragen?

Gruss Outremont

Ich hab folgendes Skript, welches nur ein OK bringt wenn beide Dateien den Eintrag haben:

logfile monitoring

#

DBExport logfile

$seekfilesdir = ‘C:\\groundwork\\temp’; @searches = ( { tag => ‘DBExport Logfile’, logfile => ‘D:\\backup\\oracle\\full\\posdb\\monday\\log\\exp_monday.log’, criticalpatterns => [ '!Export erfolgreich ohne Warnungen beendet.'

    ],

options           => 'protocol'

},

{ tag => 'DBExport Logfile', logfile => 'D:\\backup\\oracle\\full\\posdb\\tuesday\\log\\exp_tuesday.log', criticalpatterns => [ '!Export erfolgreich ohne Warnungen beendet.'

    ],

options           => 'protocol'

},

);

./check_logfiles –logfile=”/path/to/file.log” –config=ALERTLOG.cfg

This way i can control many different logfile with identical config file …? Do you know if its possible ?