This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
zabbix_logs [2025/11/08 05:30] val |
zabbix_logs [2025/11/09 08:41] (current) val |
||
|---|---|---|---|
| Line 30: | Line 30: | ||
| # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | ||
| + | # cat /etc/zabbix/zabbix_agentd.conf | ||
| + | </code><code> | ||
| + | ... | ||
| + | ServerActive=server | ||
| + | ... | ||
| + | </code><code> | ||
| # usermod -aG adm zabbix | # usermod -aG adm zabbix | ||
| + | |||
| + | # hostname | ||
| + | abcd.corpX.un | ||
| # service zabbix-agent restart | # service zabbix-agent restart | ||
| + | |||
| + | Host: abcd.corpX.un | ||
| Item: | Item: | ||
| - | Name: Error message in syslog | + | Name: Error log in syslog |
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| - | Key: logrt[/var/log/syslog,(?i)error] | + | Key: log[/var/log/syslog,rror] или log[/var/log/syslog,(?i)error] |
| History: 1d | History: 1d | ||
| Item: | Item: | ||
| - | Name: Unknown message in syslog | + | Name: Unknown log in syslog |
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| - | Key: logrt[/var/log/syslog] | + | Key: log[/var/log/syslog] |
| Preprocessing: | Preprocessing: | ||
| Name: Does not match regular expression | Name: Does not match regular expression | ||
| Line 51: | Line 61: | ||
| Trigger: | Trigger: | ||
| - | Name: Error|Unknown message in syslog on {HOST.NAME} | + | Name: Error|Unknown log in syslog on {HOST.NAME} |
| Severity: Warning | Severity: Warning | ||
| - | Expression: nodata(/Zabbix server/logrt[/var/log/syslog,(?i)error],1m)=0 | + | Expression: nodata(/Zabbix server/log[/var/log/syslog,rror],1m)=0 |
| - | Expression: nodata(/Zabbix server/logrt[/var/log/syslog],1m)=0 | + | Expression: nodata(/Zabbix server/log[/var/log/syslog,(?i)error],1m)=0 |
| + | Expression: nodata(/Zabbix server/log[/var/log/syslog],1m)=0 | ||
| | | ||
| </code> | </code> | ||