This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
zabbix_logs [2026/04/13 12:06] val [Черновик] |
zabbix_logs [2026/04/13 14:47] (current) val |
||
|---|---|---|---|
| Line 30: | Line 30: | ||
| # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | # cat /var/log/syslog | egrep -v 'DHCPACK|DHCPREQUEST|Wrote.*leases|sessionclean|ALLOWED|run-parts.*report' | ||
| - | # grep -P '(?i)(error|warn|critical)(?!.*(?i:test|debug|verbose))' /var/log/syslog | + | # grep -P '^(?!.*(?i:test|debug|verbose)).*(?i:error|warn|critical)' /var/log/syslog |
| # cat /etc/zabbix/zabbix_agentd.conf | # cat /etc/zabbix/zabbix_agentd.conf | ||
| Line 50: | Line 50: | ||
| Name: Error log in syslog | Name: Error log in syslog | ||
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| - | Key: log[/var/log/syslog,rror] или log[/var/log/syslog,(?i)error] | + | Key: log[/var/log/syslog,(?i)error] |
| + | log[/var/log/syslog,^(?!.*(?i:test|debug|verbose)).*(?i:error|warn|critical),,,skip] | ||
| History: 1d | History: 1d | ||
| Line 56: | Line 57: | ||
| Name: Unknown log in syslog | Name: Unknown log in syslog | ||
| Type: Zabbix Agent(active) | Type: Zabbix Agent(active) | ||
| - | Key: log[/var/log/syslog] | + | Key: log[/var/log/syslog,,,,skip] |
| Preprocessing: | Preprocessing: | ||
| Name: Does not match regular expression | Name: Does not match regular expression | ||
| Line 65: | Line 66: | ||
| Name: Error|Unknown log in syslog on {HOST.NAME} | Name: Error|Unknown log in syslog on {HOST.NAME} | ||
| Severity: Warning | Severity: Warning | ||
| - | Expression: nodata(/Zabbix server/log[/var/log/syslog,rror],1m)=0 | + | Expression: nodata(/Zabbix server/log[/var/log/syslog, ... ],1m)=0 |
| - | Expression: nodata(/Zabbix server/log[/var/log/syslog,(?i)error],1m)=0 | + | |
| - | Expression: nodata(/Zabbix server/log[/var/log/syslog],1m)=0 | + | |
| - | | + | |
| </code> | </code> | ||
| - | ===== DeepSeek ===== | + | ===== Разбор от DeepSeek ===== |
| <code> | <code> | ||