8 Aug
2008
8 Aug
'08
2:51 p.m.
Are you sure (not that I'm in a position to question anyone else's knowledge about hobbit..)?
hobbit-clients.cfg says:
Example: Go yellow if the text "WARNING" shows up in any logfile.
LOG %.* WARNING COLOR=yellow
So I thought it could be a simple text string...
From: Lars Ebeling [mailto:lars.ebeling at leopg9.no-ip.org] Sent: 08 August 2008 15:37 To: hobbit at hswn.dk Subject: Re: [hobbit] monitoring logs
somestring has to be a regular expression (which i know nothing about), but %Relay works for me.
Regards
Lars
----- Original Message -----
From: Johan Booysen <mailto:johan at matrix-data.co.uk>
To: hobbit at hswn.dk
Sent: Friday, August 08, 2008 4:28 PM
Subject: [hobbit] monitoring logs
I'm trying to get hobbit to monitor /var/log/messages for
specific entries ("somestring" in my example below) on server1.
In hobbit-clients.cfg I've added (above DEFAULT):
HOST=server1
LOG /var/log/messages somestring COLOR=red
And in client-local.cfg, I've added:
server1
log:/var/log/messages:10240
ignore MARK
My understanding is that server1 should now collect data from
/var/log/messages, and the hobbit server will then, if it finds "somestring" in the log file, flag it as red in the msgs column.
I can now see the entire log for server1 on the web interface,
but the msgs icon doesn't change to red.
What am I missing?
Also, does any of the defaults in client-local.cfg match RHEL5
machines, e.g.
[redhat]
log:/var/log/messages:10240
ignore MARK
or
[redhatES]
log:/var/log/messages:10240
ignore MARK
Thanks.