Differences

This shows you the differences between two versions of the page.

--- zabbix_logs [2025/11/07 15:23]
val
+++ zabbix_logs [2025/11/09 08:41] (current)
val
@@ Line 25: / Line 25: @@
 <code>
 # ###apt install rsyslog
+# cat /var/log/syslog | grep -i 'error'
 # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report'
+# cat /etc/zabbix/zabbix_agentd.conf
+</code><code>
+...
+ServerActive=server
+...
+</code><code>
 # usermod -aG adm zabbix
+# hostname
+abcd.corpX.un
 # service zabbix-agent restart
+Host: abcd.corpX.un
+Item:
+  Name: Error log in syslog
+  Type: Zabbix Agent(active)
+  Key: log[/var/log/syslog,rror]  или  log[/var/log/syslog,(?i)error]
+  History: 1d
 Item:
-  Name: Log syslog
+  Name: Unknown log in syslog
   Type: Zabbix Agent(active)
-  Key: logrt[/var/log/syslog]
+  Key: log[/var/log/syslog]
   Preprocessing:
     Name: Does not match regular expression
@@ Line 43: / Line 61: @@
 Trigger:
-  Name: Log syslog on {HOST.NAME}
+  Name: Error|Unknown log in syslog on {HOST.NAME}
   Severity: Warning
-  Expression: nodata(/Zabbix server/logrt[/var/log/syslog],1m)=0
+  Expression: nodata(/Zabbix server/log[/var/log/syslog,rror],1m)=0
+  Expression: nodata(/Zabbix server/log[/var/log/syslog,(?i)error],1m)=0
+  Expression: nodata(/Zabbix server/log[/var/log/syslog],1m)=0
 </code>

Методические материалы Лохтурова Вячеслава