Monitoring log files.

[Williams, P. Lane]

check_log2.pl is smart enough to know that the log file was rotated.  My
moitoring server also serves as a syslog server for MS Event Logs for a few
hundred MS machines that are monitored.  I use a combination of syslog-ng
and Event-Sentry, and a slightly modified check_log2.pl does the work.  All
the logs are rotated daily with logrotate.  Works great.
 
Lane

-----Original Message-----
From: Webster, Stuart SITI-ITDIUR [mailto:Stuart.Webster at shell.com]
Sent: Wednesday, June 11, 2003 6:47 AM
To: nagios-users at lists.sourceforge.net
Subject: [Nagios-users] Monitoring log files.



Hello 

Does any one have any experience and advice for monitoring envirnonments
with a lot of log files. 

So far i have tried the standard check_log that comes with nagios. from my
understanding this creates a copy of the log file, this is not really viable
for me as it would need too much disk space.

I also have tried check_log2.pl from the contrib directory. this works by
creating a counter to remember what line it was on for the next check. this
works fine untill the log rotates, then when a new log file is created, im
presuming the log_check2.pl will not know to start from the beggining of the
log.

Has anyone solved these problems of rotating log files, the only solution i
can think of it to write a cron that changes check_log2.pl's counter to 0
when the logs rotate, but this wil prove a complicated setup.


help or ideas appreciated 

Stuart 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20030611/b61c20db/attachment.html>