Re: Log files monitoring

[Marco Ermini]

On 5/2/05, SorinS <address@hidden> wrote:
> Hi,
> I was wondering whether there is any plan of implementing alerting for
> certain events in log files. Something like:
>
> check file syslog with path /var/log/messages
>    if match "^[A-Za-z][a-z][a-z] .[0-9] [0-9][0-9]:[0-9][0-9]:[0-9][0-9] 
>.* .* .*$"  then alert
>
> or if match regepx "..." then alert
>
> Monit could maintain the offset of each file (a la logtail) so it would
> check only the last  entries.
>
> Sorry if this is a bad ideea, but it would be certainly usefull for me
> right now.
> Cheers,
> Sorin

I don't think this is a bad idea.

I have a similar, but opposite :-) need. I need to produce a custom logfile
instead of the monit's default one. This is needed to integrate Monit with
other proprietary monitoring tools (specifically in my case, HP OpenView)
which are already in place in the server farm.

It would be fine to be able to customize the logfile in a way similar to the
Apache's one.


Regards.


-- 
Marco Ermini
http://markoer.org - ICQ 50825709 - GPG KEY 0x64ABF7C6 - L.U. #180221
Di fronte alle sofferenze del mondo tu puoi tirarti indietro, sì, questo è
qualcosa che sei libero di fare e che si accorda con la tua natura, ma
precisamente questo tirarsi indietro è l'unica sofferenza che forse potresti
evitare. (F. Kafka)