Hi Hendrik, The problem is that nagios is registering all ok states, even if the state before was ok already. Nagios is registering all the checks it does, this is not the normal behavior of the log file, since we have other instalations of nagios that don't have this behavor. Thanks in advance for your reply. Best Regards, Jorge Dionisio <div>On 7/31/07, Hendrik Bäcker <<a href="mailto:andurin@process-zero.de"> andurin@process-zero.de</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Jorge, this would not work. Nagios takes the logfiles as a datapool. The CGIs for example are reading the logfiles to determine how long a service was up and how long it was down. The CGIs are working like pits and lands. I'm afraid I can't explain this in a short sentence.... so take the long one: Nagios begins to read a log file, at this moment it doesn't know the status of the service (up or warning or critical???) Nagios finds a log entry that the service is now critical, so after this point the service IS critical and before this event it is undeterminded. After a few lines of log nagios sees that this service is now in an OK state... Actual: OK Past: CRITICAL (since the Critical Log entry) Future: OK until another Log entry So if you would try to strip out your OK states from your logs it would not be what you want... Hope that helps to understand. Regards Hendrik Jorge Dionisio schrieb: > Hi, > > This may be a bit off topic and for this I apologize, I have a nagios > deamon that registers all the envents, ok and not ok, on the log file. > While I want it to only register in the log file the non ok events. Can > someone help me on this? > > Best Regards, > Jorge Dionisio > > -- > A presente mensagem pode conter informação considerada confidencial. > Se o receptor desta mensagem não for o destinatário indicado, fica > expressamente proibido de copiar ou endereçar a mensagem a terceiros. > Em tal situação, o receptor deverá destruir a presente mensagem e por > gentileza informar o emissor de tal facto. > > Privileged or confidential information may be contained in this > message. If you are not the addressee indicated in this message, you > may not copy or deliver this message to anyone. In such case, you > should destroy this message and kindly notify the sender by reply > email. > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> <a href="http://get.splunk.com/">http://get.splunk.com/</a> > > > ------------------------------------------------------------------------ > > _______________________________________________ > Nagios-devel mailing list > <a href="mailto:Nagios-devel@lists.sourceforge.net">Nagios-devel@lists.sourceforge.net</a> > <a href="https://lists.sourceforge.net/lists/listinfo/nagios-devel">https://lists.sourceforge.net/lists/listinfo/nagios-devel </a> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) iD8DBQFGr1zhlI0PwfxLQjkRAiJcAJ9zrx529S3MKU1+P18L4w08+rt5nACdFHt0 dWChgYf/o967QGnVOBk3FgQ= =HgcH -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> <a href="http://get.splunk.com/">http://get.splunk.com/</a> _______________________________________________ Nagios-devel mailing list <a href="mailto:Nagios-devel@lists.sourceforge.net">Nagios-devel@lists.sourceforge.net </a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-devel">https://lists.sourceforge.net/lists/listinfo/nagios-devel</a> </blockquote></div> -- A presente mensagem pode conter informação considerada confidencial. Se o receptor desta mensagem não for o destinatário indicado, fica expressamente proibido de copiar ou endereçar a mensagem a terceiros. Em tal situação, o receptor deverá destruir a presente mensagem e por gentileza informar o emissor de tal facto. Privileged or confidential information may be contained in this message. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.