[hobbit] HowTo monitor log files

The client-local.cfg and the hobbit-clients.cfg need to be modified on the Hobbit server. You shouldn't have to change any files on the actual client side. Specify the file to monitor in client-local.cfg. Specify the color conditions in the hobbit-clients.cfg. See documentation in each file.

---client-local.cfg--- [server1] log:/var/log/messages:10240

---hobbit-client.cfg--- HOST=server1 LOG /var/log/messages abort COLOR=red

David

From: Benoit list [mailto:mailinglist.benoit at gmail.com] Sent: Wednesday, June 04, 2008 3:34 PM To: hobbit at hswn.dk Subject: Re: [hobbit] HowTo monitor log files

Hello guys, I encounter the same problem that "linuxmasterjedi" :s My hobbit server says also "No files checked"

Do you have a good advise for this problem embarrassing ???

Thanks by advance

+++++++++++++++++++++++++++

2008/6/2 L.M.J <linuxmasterjedi at free.fr>:

Hi,

 I'm trying to monitor LOG files on a Linux OS via the Hobbit

client monitor 4.2.0. I have some issue : file information are not send back to the server. I've checked the ML & the conf file : # ************ IMPORTANT

    #   To monitor a logfile, you *MUST* configure both

client-local.cfg # and hobbit-clients.cfg. If you configure only the client-local.cfg # file, the client will collect the log data and you can view it in # the "client data" display, but it will not affect the color of the # "msgs" status. On the other hand, if you configure only the # hobbit-clients.cfg file, then there will be no log data to inspect, # and you will not see any updates of the "msgs" status either.

 BTW, client-local.cfg & hobbit-clients.cfg does not exist

anymore ;). Anyway, I put this on my client side localclient.cfg file :

       # FILE Check
       FILE /var/log/messages  SIZE>0 MTIME<1200 yellow
       FILE /var/log/messages  red     "timed out!"
       FILE /var/log/messages  red     "abort!"

       # LOG
       LOG %/var/log/messages %(I/O|read).error COLOR=red

 ll /var/log/messages
  -rw-r----- 1 root adm 5530 May 29 16:25 /var/log/messages

 Hobbit is in the "adm" group, it can read the file. So why my

Hobbit server keep saying "No files checked" ?

  Thanks by advance!

--

<mailinglist.benoit - at - gmail!com>