<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII"> <meta name=ProgId content=Word.Document> <meta name=Generator content="Microsoft Word 10"> <meta name=Originator content="Microsoft Word 10"> <link rel=File-List href="cid:filelist.xml@01C32B38.423EF110"> <title>Nagios check_log help</title>  <style>  </style>  </head> <body lang=EN-US link=blue vlink=purple style='tab-interval:36.0pt'> <div class=Section1> Yes the -O is necessary for the script to keep track of where it left off. The plugin is a perl script. From the in-script comments:<o:p></o:p> <o:p> </o:p> # Description:<o:p></o:p> #<o:p></o:p> # This plugin will scan a log file (specified by the <log_file> option)<o:p></o:p> # for a specific pattern (specified by the <pattern> option). Successive<o:p></o:p> # calls to the plugin script will only report *new* pattern matches in the<o:p></o:p> # log file, since an copy of the log file from the previous run is saved<o:p></o:p> # to <old_log_file>.<o:p></o:p> #<o:p></o:p> # Output:<o:p></o:p> #<o:p></o:p> # On the first run of the plugin, it will return an OK state with a message<o:p></o:p> # of "Log check data initialized". On successive runs, it will return an OK<o:p></o:p> # state if *no* pattern matches have been found in the *difference* between the<o:p></o:p> # log file and the older copy of the log file. If the plugin detects any<o:p></o:p> # pattern matches in the log diff, it will return a CRITICAL state and print<o:p></o:p> # out a message is the following format: "(x) last_match", where "x" is the<o:p></o:p> # total number of pattern matches found in the file and "last_match" is the<o:p></o:p> # last entry in the log file which matches the pattern.<o:p></o:p> #<o:p></o:p> # Notes:<o:p></o:p> #<o:p></o:p> # If you use this plugin make sure to keep the following in mind:<o:p></o:p> #<o:p></o:p> # 1. The "max_attempts" value for the service should be 1, as this<o:p></o:p> # will prevent Nagios from retrying the service check (the<o:p></o:p> # next time the check is run it will not produce the same results).<o:p></o:p> #<o:p></o:p> # 2. The "notify_recovery" value for the service should be 0, so that<o:p></o:p> # Nagios does not notify you of "recoveries" for the check. Since<o:p></o:p> # pattern matches in the log file will only be reported once and not<o:p></o:p> # the next time, there will always be "recoveries" for the service, even<o:p></o:p> # though recoveries really don't apply to this type of check.<o:p></o:p> #<o:p></o:p> # 3. You *must* supply a different <old_file_log> for each service that<o:p></o:p> # you define to use this plugin script - even if the different services<o:p></o:p> # check the same <log_file> for pattern matches. This is necessary<o:p></o:p> # because of the way the script operates.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> -----Original Message----- From: Webster, Stuart SITI-ITDIUR [mailto:Stuart.Webster@shell.com] Sent: June 5, 2003 7:19 AM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] Nagios check_log help <o:p> </o:p> Hello <o:p></o:p> Could some body please help me with this plugin, and explain what the proper command line arguments should be. <o:p></o:p> The documentations says: Usage: check_log -F logfile -O oldlog -q query Usage: check_log --help Usage: check_log --version <o:p></o:p> i presume -F is the log file I want to check, and -q is the string I am searching the log for. <o:p></o:p> I have tried #./check_log -F test_log -q WARNING this just goves the following error ./check_log: test: argument expected. <o:p></o:p> what is the -O for old log?? I only have 1 log file, is the -O necessary? the documentation for this plugin is very brief. <o:p></o:p> Help Apreciated <o:p></o:p> Stuart <o:p></o:p> </div> </body> </html>