This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
|
zabbix_logs [2025/11/07 15:23] val |
zabbix_logs [2025/11/07 15:32] (current) val |
||
|---|---|---|---|
| Line 25: | Line 25: | ||
| <code> | <code> | ||
| # ###apt install rsyslog | # ###apt install rsyslog | ||
| + | |||
| + | # cat /var/log/syslog | egrep -i 'error' | ||
| # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | ||
| Line 34: | Line 36: | ||
| Item: | Item: | ||
| - | Name: Log syslog | + | Name: Error message in syslog |
| + | Type: Zabbix Agent(active) | ||
| + | Key: logrt[/var/log/syslog,(?i)error] | ||
| + | History: 1d | ||
| + | |||
| + | Item: | ||
| + | Name: Unknown message in syslog | ||
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| Key: logrt[/var/log/syslog] | Key: logrt[/var/log/syslog] | ||
| Line 43: | Line 51: | ||
| Trigger: | Trigger: | ||
| - | Name: Log syslog on {HOST.NAME} | + | Name: Error|Unknown message in syslog on {HOST.NAME} |
| Severity: Warning | Severity: Warning | ||
| + | Expression: nodata(/Zabbix server/logrt[/var/log/syslog,(?i)error],1m)=0 | ||
| Expression: nodata(/Zabbix server/logrt[/var/log/syslog],1m)=0 | Expression: nodata(/Zabbix server/logrt[/var/log/syslog],1m)=0 | ||
| | | ||