---

Subject:	Hello,
Author:	[Not Specified]
Posted:	2016-09-28 14:14

I am assuming to monitor the file event.log and check for a string "ERROR" in the file.

Please create a duplicate template over the existing one and define a datapoint eg. Name : LogCheck

Event Class: /Ignore

Parser : Auto

Component: event.log

Command Template: Enter the below command

check_log -F /opt/zenoss/log/event.log -O /tmp/event.log -q "ERROR" -h localhost

You can try changing the paths of the logfiles in the command.

PS:Localhost is my RM.

---

Subject:	Hi Mohammed,
Author:	[Not Specified]
Posted:	2016-09-29 00:34

Hi Mohammed,

Thanks for the answer! How does it worsk when I want to check logfiles on other servers than the localhost. I have to enable ssh config and the logfile will be copied to localhost Then it's possible to filter the logfile

Kr

Sren

---

Subject:	Hello,
Author:	[Not Specified]
Posted:	2016-09-29 01:32

You canSSH to the remote server. You can achieve this by writing a command.

The logfile won't be copied to the localhost.

The command checks the parameters mentioned and returns a value, which triggers an event if the conditions aremet.

---

Subject:	Hi Mohammed,
Author:	[Not Specified]
Posted:	2016-09-29 01:44

Hi Mohammed,

So this means that it's possible to write a command for checking a rolling logfile on specific text. If this text is found in the logfile , an event will be triggered

thx!!

---

Subject:	Hello,
Author:	[Not Specified]
Posted:	2016-09-30 14:06

That is correct.

---

Subject:	Hi Mohammed,
Author:	[Not Specified]
Posted:	2017-04-04 22:27

Hi Mohammed,

Newb in Zenoss... how do I do this say when I want to monitor strings from multiple windows log file using regex. Can i do this?

ie.  

log directory under 

C:\inetpub\logs\LogFiles

any logfile named = U_ve*.log

with search strings

WrongObjectTypeException

 or

iOS+6*

 

Please advise. Thanks!