Nagios vs. Icinga in the logfile

[smcracraft]

I'm looking at wanting to parse the logfile for some verifications.

An example record:

ip-address [encoded-numeric-date] CURRENT SERVICE STATE: FULLY-QUALIFIED-HOSTNAME;SERVICE;OK;HARD;1;(null)

What does this mean?

Is there an online document which describes the format of the Nagios/Icinga logfile.

Are there differences between the two solutions in regards to the above?

Thanks!

[abrist]

s there an online document which describes the format of the Nagios/Icinga logfile.

Not that I have seen.

What does this mean?

Could you clarify? Are you looking for a breakdown of the macros used to create a standard log file line? If so, what type of log line? (alert, check, startup notice, etc)

[smcracraft]

I am just looking to find out when things go to a hard down state, how it
is logged in the record and then are in soft and then full recovery.

Poking around in the file without a definition of its syntax only gets one so far.

[tmcdonald]

Are there differences between the two solutions in regards to the above?

I can't really say much about Icinga because I don't use it, but considering it is a fork of the Nagios project it should have a similar logging format.

That said, I would read up on the state types:

http://nagios.sourceforge.net/docs/nagi ... types.html

and some related config entries:

http://nagios.sourceforge.net/docs/nagi ... ce_retries
http://nagios.sourceforge.net/docs/nagi ... st_retries