To revoke a table output from log files

[RIDS_I2MP]

Hi Team,

We want to implement below monitoring:
• Monitor IIS7 webserver log files and report whenever page response time exceeds a pre-defined threshold. For e.g letz say home page response time threshold is 1min and that of product details page is 30sec. In a day, if home page response time has exceeded 1min 6 times and product details pages response time has exceeded threshold 10 times, Nagios should report as below

Page Max. response time # exceed threshold Threshold
Home page 5min 6 1min
Product details 3min 10 30sec

• Monitor application log files for specific error messages and send an alert. For e.g if Oracle database connectivity error is logged then Nagios should send an alert

Kindly suggest.

[tmcdonald]

For either scenario, you really should be using Nagios Logserver. It was designed specifically to address these sorts of issues and is going to be much easier to configure in both cases.

If you really want to use XI, you will need to use a log parsing plugin like those listed on this page:

https://exchange.nagios.org/directory/Plugins/Log-Files

In the case of the first scenario, you will either need to find a plugin that can keep track of log file entries within a certain time frame, or write such functionality yourself. But really, Logserver is the way to go here, and I am saying this as a technical person who has had to set up log monitoring using both methods, not as a sales pitch.