User Tools
zabbix_logs
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
zabbix_logs [2026/08/18 13:58] val [Шаг 3. Регистрация событий в Zabbix] |
zabbix_logs [2026/08/19 12:49] (current) val [Шаг 3. Регистрация событий в Zabbix] |
||
|---|---|---|---|
| Line 27: | Line 27: | ||
| ===== Шаг 2. Анализ событий ===== | ===== Шаг 2. Анализ событий ===== | ||
| - | * [[Поиск важных событий в syslog]] на gate | + | * [[Поиск важных событий в syslog]] на gate (1-й вариант) |
| ===== Шаг 3. Регистрация событий в Zabbix ===== | ===== Шаг 3. Регистрация событий в Zabbix ===== | ||
| Line 47: | Line 47: | ||
| Item: | Item: | ||
| - | Name: Error|High log in syslog | + | Name: High|Error log in syslog |
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| Key: log[/var/log/syslog,(?i)error,,,skip] | Key: log[/var/log/syslog,(?i)error,,,skip] | ||
| - | Key: log[/var/log/syslog,^(?!.*(?i:test|debug|pnp)).*(?i:error|abandon|fail),,,skip] | + | Key: log[/var/log/syslog,^(?!.*(?i:test|debug|vmwgfx)).*(?i:error|abandon|fail|expire),,,skip] |
| Key: log[/var/log/syslog.high,,,,skip] | Key: log[/var/log/syslog.high,,,,skip] | ||
| Update interval: 10s | Update interval: 10s | ||
| - | |||
| - | Preprocessing: #Добавить на второй итерации, после перезагрузки | ||
| - | Name: Does not match regular expression | ||
| - | Parameters: PNP0A03|LPM|ehci_hcd|collector initialized|vmwgfx | ||
| - | Custom on fail: Discard Value | ||
| History: 1d | History: 1d | ||
| </code> | </code> | ||
| * [[Регистрация событий в Linux#Использование утилиты logger]] | * [[Регистрация событий в Linux#Использование утилиты logger]] | ||
| + | * Перезагружаем для появления "неожиданных" сообщений | ||
| + | * **LLM промпт:** это важное сообщение? | ||
| + | <code> | ||
| + | Preprocessing: | ||
| + | Name: Does not match regular expression | ||
| + | Parameters: LPM|ehci_hcd|collector initialized | ||
| + | Custom on fail: Discard Value | ||
| + | Name: Does not match regular expression | ||
| + | Parameters: fail to add MMCONFIG information | ||
| + | Custom on fail: Discard Value | ||
| + | </code> | ||
| + | * Настраиваем Trigger | ||
| <code> | <code> | ||
| Trigger: | Trigger: | ||
| - | Name: Error|High log in syslog on {HOST.NAME} | + | Name: High|Error log in syslog on {HOST.NAME} |
| Severity: Warning | Severity: Warning | ||
| Expression: nodata(/gate.corpX.un/log[/var/log/syslog..., ... ],1m)=0 | Expression: nodata(/gate.corpX.un/log[/var/log/syslog..., ... ],1m)=0 | ||
zabbix_logs.1787050691.txt.gz · Last modified: 2026/08/18 13:58 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
