User Tools

Site Tools


zabbix_logs

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
zabbix_logs [2025/11/07 12:54]
val [Черновик]
zabbix_logs [2025/11/09 08:41] (current)
val
Line 1: Line 1:
 ====== Использование Zabbix для мониторинга журналов,​ или, как не пропустить что-то неожиданное ====== ====== Использование Zabbix для мониторинга журналов,​ или, как не пропустить что-то неожиданное ======
 +
 +  * [[https://​www.zabbix.com/​documentation/​6.0/​ru/​manual/​config/​items/​itemtypes/​log_items|Руководство по Zabbix Мониторинг файлов журналов]]
 +  * [[https://​www.zabbix.com/​documentation/​current/​en/​manual/​regular_expressions]]
 +  * [[https://​habr.com/​ru/​articles/​737058/​|Логи из Linux в Zabbix. Подробнейшая инструкция]]
 +  * [[https://​www.zabbix.com/​forum/​zabbix-help/​457279-trying-to-make-a-trigger-of-a-monitored-logfile|Trying to make a trigger of a monitored logfile]]
  
 ===== Реклама ===== ===== Реклама =====
Line 21: Line 26:
 # ###apt install rsyslog # ###apt install rsyslog
  
-# cat /​var/​log/​syslog | egrep -'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report'+# cat /​var/​log/​syslog | grep -'error'
  
 +# cat /​var/​log/​syslog | egrep -v '​DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report'​
  
 +# cat /​etc/​zabbix/​zabbix_agentd.conf
 +</​code><​code>​
 +...
 +ServerActive=server
 +...
 +</​code><​code>​
 # usermod -aG adm zabbix # usermod -aG adm zabbix
 +
 +# hostname
 +abcd.corpX.un
  
 # service zabbix-agent restart # service zabbix-agent restart
 +
 +Host: abcd.corpX.un
 +
 +Item:
 +  Name: Error log in syslog
 +  Type: Zabbix Agent(active)
 +  Key: log[/​var/​log/​syslog,​rror] ​ или ​ log[/​var/​log/​syslog,​(?​i)error]
 +  History: 1d
  
 Item: Item:
-  Name: Log syslog+  Name: Unknown log in syslog
   Type: Zabbix Agent(active)   Type: Zabbix Agent(active)
-  Key: logrt[/​var/​log/​syslog]+  Key: log[/​var/​log/​syslog]
   Preprocessing:​   Preprocessing:​
     Name: Does not match regular expression     Name: Does not match regular expression
Line 38: Line 61:
  
 Trigger: Trigger:
-  Name: Log syslog on {HOST.NAME}+  Name: Error|Unknown log in syslog on {HOST.NAME}
   Severity: Warning   Severity: Warning
-  Expression: nodata(/​Zabbix server/logrt[/​var/​log/​syslog],​1m)=0+  Expression: nodata(/​Zabbix server/log[/​var/​log/​syslog,​rror],​1m)=0 
 +  Expression: nodata(/​Zabbix server/​log[/​var/​log/​syslog,​(?​i)error],​1m)=0 
 +  Expression: nodata(/​Zabbix server/log[/​var/​log/​syslog],​1m)=0
   ​   ​
  
 </​code>​ </​code>​
  
zabbix_logs.1762509264.txt.gz · Last modified: 2025/11/07 12:54 by val