LOG CHECK SENDING ALERTS OF OLD TIMESTAMP

[ericssonvietnam]

I am using check logfile check in order to generate alert for the critical pattern form the log file in past few days i have received the alert in Nagios with old time stamp.
Can you let me know what should i check attaching the alert generated on the Nagios.

Below is the configuration to generate critical pattern :

SSH:nagios@HNUSS2# cat AuthCri.conf
$seekfilesdir = '/export/home/nagios/logfile_basedir/tmp';
$protocolsdir = '/export/home/nagios/logfile_basedir/tmp';
$scriptpath = '/export/home/nagios/bin';
#$MACROS = { CL_DISK01 => "/dev/dsk/c0d1", CL_DISK02 => "/dev/dsk/c0d2" };

@searches = (
{
tag => 'Authcri',
warningpatterns => ['auth.crit] rebooted by'] ,
#okpatterns => ['ALARM_CLR'] ,
options => 'sticky=1800,noprotocol,report=long,allyoucaneat',
logfile => '/var/log/authlog'

}
);

[ssax]

That is likely because of your sticky=1800 option:

Code: Select all

--sticky[=<lifetime>] Errors are propagated through successive runs.

Try removing that and see if it resolves the issue.


Thank you

[ericssonvietnam]

That is likely because of your sticky=1800 option:

Code: Select all

--sticky[=<lifetime>] Errors are propagated through successive runs.

Try removing that and see if it resolves the issue.


Thank you

Should i comment out whole options line in the configuration.
As shown below :
#options => 'sticky=1800,noprotocol,report=long,allyoucaneat',

[tacolover101]

it's hard to say if a comment will do, so test by removing it fully. (it should though.)

[ssax]

That should be fine, give it a try and let us know if that resolves your issue.

Thank you