check_logfiles with report=long, how to limit to recent only
Posted: Wed Sep 25, 2019 12:39 pm
Hi folks,
I'm using check_logfiles v3.11.0.2 with "$options = 'report=long';". when it finds an error, instead of it just showing the errors since the last time the service was "OK", it shows all of the errors that match. Here's an example scenario ..
Check 1: OK
<New error goes to he log - "Connection refused 1"
Check 2: Displays the error in the long output
Connection refused 1
Check 3: OK
<New error goes to he log - "Connection refused 2"
Check 4: Displays both of the errors instead of just the new one.
Connection refused 1
Connection refused 2
So basically if my log file has 250 errors in it, I'm going to see them all from the plugin each time a new error occurs. That seems weird.
Is there a way to have it just show me the errors that have occurred since the last time the service was "OK"? Am i just being too picky?
Here's my config file
Thanks!
-Adam
I'm using check_logfiles v3.11.0.2 with "$options = 'report=long';". when it finds an error, instead of it just showing the errors since the last time the service was "OK", it shows all of the errors that match. Here's an example scenario ..
Check 1: OK
<New error goes to he log - "Connection refused 1"
Check 2: Displays the error in the long output
Connection refused 1
Check 3: OK
<New error goes to he log - "Connection refused 2"
Check 4: Displays both of the errors instead of just the new one.
Connection refused 1
Connection refused 2
So basically if my log file has 250 errors in it, I'm going to see them all from the plugin each time a new error occurs. That seems weird.
Is there a way to have it just show me the errors that have occurred since the last time the service was "OK"? Am i just being too picky?
Here's my config file
Code: Select all
$options = 'report=long';
@searches = (
{
tag => 'mpac_http',
logfile => '/var/log/httpd/mpac_8888_ssl_error_log',
criticalpatterns => [
'.*Connection refused.*',
'.*Cannot serve directory.*'
],
});-Adam