Nagios sents notifi immideatly after recieving syslog error

[Thomas Stocking]

Well, yes...or do it at the plugin level.
I mean, what about writing the syslog messages to a log file that you 
parse every 5 minutes? There are plugins like check_log3 that do this, 
and they can be set to filter for regex expressions.
Another way would be to use syslog-ng to accept and filter the syslog 
messages, and post them to Nagios as passive checks via a program that 
does some consolidation/filtering for you.
We have done this using the Foundation database in GroundWork - post the 
messages there, and then query periodically to find the conditions you 
want an alert for with a simple perl plugin.
FYI GroundWork Foundation is now bundled into GroundWork Monitor Open 
Source 5.1.
    Thomas

http://www.nagiosexchange.org/Solaris.50.0.html?&tx_netnagext_pi1[p_view]=423
http://www.balabit.com/products/syslog_ng/
http://gwfoundation.sourceforge.net/
http://www.groundworkopensource.com/downloads/full_download.html

Andy Shellam wrote:
> At first glance I'd say you'd need to write your own notification 
> handler that does this for you.
> It would be much easier to write, say, a shell script that takes the 
> notification details as parameters to the script.
>
> That way your script can then do much greater filtering than Nagios 
> alone does.
>
> Andy.
>
> chiel wrote:
>   
>> Hello,
>>  
>> On some of my network devices I have set up syslog to send there 
>> results to Nagios trough passive checks. This works perfectly.
>> When syslog sents a error messages Nagios immideatly sents a 
>> notification e-mail/sms.
>>  
>> The thing is that when syslog sent for example 20 error messages from 
>> one device within 5 secondes I also get 20 e-mail/sms notifications.
>> Is there a way that Nagios waits for (let say) 5 minutes, after the 
>> first error hase been received, and than sents these 20 error messages 
>> all in one notification?
>>  
>> chiel
>>  
>>  
>>  
>>  
>>  
>> !DSPAM:37,461cecf489294516711538!
>> ------------------------------------------------------------------------
>>
>> -------------------------------------------------------------------------
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to share your
>> opinions on IT & business topics through brief surveys-and earn cash
>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>>
>> !DSPAM:37,461cecf489294516711538!
>>   
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Nagios-users mailing list
>> Nagios-users at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nagios-users
>> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
>> ::: Messages without supporting info will risk being sent to /dev/null
>>
>> !DSPAM:37,461cecf489294516711538!
>>   
>>     
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
>   

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null