what is log format?

[Marc Powell]

On Nov 28, 2007, at 11:20 PM, Jeremy C. Reed wrote:

> Where is the log format described?

in base/logging.c or in a fairly recent post by me to this list (in  
the last couple of weeks).

> I found http://www.nagios.org/faqs/viewfaq.php?faq_id=66 but it is not
> same as my /var/log/nagios/nagios.log. For example, I don't see any  
> retry
> number.

That's for the status.dat file. As you've seen, it has a slightly  
different format.

> Here are some examples from a Nagios 2.8 system:
>
> [1196236855] SERVICE ALERT: foo.example.com;foo.disk1;CRITICAL
> ;HARD;3;DISK CRITICAL [469380 kB (5%) free on /dev/sda2]

This service has reached a HARD state on the 3rd non-ok check attempt.

>
> [1196236855] SERVICE NOTIFICATION:
> jeremy;foo.example.com;foo.disk1;CRITICAL;notify-by-epager;DISK  
> CRITICAL
> [469380 kB (5%) free on /dev/sda2]

A notification was sent out upon reaching a HARD state  
(max_check_attempts).

> [1196312026] SERVICE ALERT: bar.example.org;bar.cpu;OK;SOFT;2;NOW:
> Mean:0.000000% Variance: 0.000000% CUMULATIVE: Mean:0.000000%  
> Variance:
> 0.000000%

This service is in a SOFT state as it's only on retry 2 of some  
unknown number. (unknown because it's not recorded in the log file at  
this point). It appears this service may be bouncing between states?

Based on these entries, nagios is not alerting on the first non-ok  
check result.

--
Marc


-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null