<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word"><HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>Nagios check_log help</TITLE> <META content=Word.Document name=ProgId> <META content="MSHTML 5.00.3315.2870" name=GENERATOR> <META content="Microsoft Word 10" name=Originator><LINK href="cid:filelist.xml@01C32B38.423EF110" rel=File-List> <STYLE>@font-face { font-family: Tahoma; } P.MsoNormal { FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" } LI.MsoNormal { FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" } DIV.MsoNormal { FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" } A:link { COLOR: blue; TEXT-DECORATION: underline; text-underline: single } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; text-underline: single } A:visited { COLOR: purple; TEXT-DECORATION: underline; text-underline: single } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; text-underline: single } P { FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN-LEFT: 0cm; MARGIN-RIGHT: 0cm; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto } SPAN.EmailStyle18 { COLOR: navy; FONT-FAMILY: Arial; mso-style-type: personal-reply; mso-style-noshow: yes; mso-ansi-font-size: 10.0pt; mso-bidi-font-size: 10.0pt; mso-ascii-font-family: Arial; mso-hansi-font-family: Arial; mso-bidi-font-family: Arial } SPAN.SpellE { mso-style-name: ""; mso-spl-e: yes } DIV.Section1 { page: Section1 } </STYLE> </HEAD> <BODY lang=EN-US link=blue style="tab-interval: 36.0pt" vLink=purple> <DIV>Thanks for the extra info, i see how it should work now,</DIV> <DIV> </DIV> <DIV>but when i try</DIV> <DIV> </DIV> <DIV>./check_log -F test -O test_log_tmp -q WARNING</DIV> <DIV>I get the same error</DIV> <DIV>./check_log: test: argument expected</DIV> <DIV> </DIV> <DIV>I have also tried with full path names.</DIV> <DIV>the test log file, just contains random lines, with one line reading WARNING</DIV> <DIV> </DIV> <DIV>does anyone know what im doing wrong?</DIV> <DIV> </DIV> <DIV>Thanks</DIV> <DIV> </DIV> <DIV>Stuart</DIV> <BLOCKQUOTE style="MARGIN-RIGHT: 0px"> <DIV align=left class=OutlookMessageHeader dir=ltr>-----Original Message----- From: Dean Bishop [mailto:dbishop@ehvert.com] Sent: 05 June 2003 13:59 To: Webster, Stuart SITI-ITDIUR; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] Nagios check_log help </DIV> <DIV class=Section1> Yes the -O is necessary for the script to keep track of where it left off. The plugin is a perl script. From the in-script comments:<o:p></o:p> <o:p> </o:p> # Description:<o:p></o:p> #<o:p></o:p> # This plugin will scan a log file (specified by the <log_file> option)<o:p></o:p> # for a specific pattern (specified by the <pattern> option). Successive<o:p></o:p> # calls to the plugin script will only report *new* pattern matches in the<o:p></o:p> # log file, since an copy of the log file from the previous run is saved<o:p></o:p> # to <old_log_file>.<o:p></o:p> #<o:p></o:p> # Output:<o:p></o:p> #<o:p></o:p> # On the first run of the plugin, it will return an OK state with a message<o:p></o:p> # of "Log check data initialized". On successive runs, it will return an OK<o:p></o:p> # state if *no* pattern matches have been found in the *difference* between the<o:p></o:p> # log file and the older copy of the log file. If the plugin detects any<o:p></o:p> # pattern matches in the log diff, it will return a CRITICAL state and print<o:p></o:p> # out a message is the following format: "(x) last_match", where "x" is the<o:p></o:p> # total number of pattern matches found in the file and "last_match" is the<o:p></o:p> # last entry in the log file which matches the pattern.<o:p></o:p> #<o:p></o:p> # Notes:<o:p></o:p> #<o:p></o:p> # If you use this plugin make sure to keep the following in mind:<o:p></o:p> #<o:p></o:p> # 1. The "max_attempts" value for the service should be 1, as this<o:p></o:p> # will prevent Nagios from retrying the service check (the<o:p></o:p> # next time the check is run it will not produce the same results).<o:p></o:p> #<o:p></o:p> # 2. The "notify_recovery" value for the service should be 0, so that<o:p></o:p> # Nagios does not notify you of "recoveries" for the check. Since<o:p></o:p> # pattern matches in the log file will only be reported once and not<o:p></o:p> # the next time, there will always be "recoveries" for the service, even<o:p></o:p> # though recoveries really don't apply to this type of check.<o:p></o:p> #<o:p></o:p> # 3. You *must* supply a different <old_file_log> for each service that<o:p></o:p> # you define to use this plugin script - even if the different services<o:p></o:p> # check the same <log_file> for pattern matches. This is necessary<o:p></o:p> # because of the way the script operates.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> -----Original Message----- From: Webster, Stuart SITI-ITDIUR [mailto:Stuart.Webster@shell.com] Sent: June 5, 2003 7:19 AM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] Nagios check_log help <o:p> </o:p> Hello <o:p></o:p> Could some body please help me with this plugin, and explain what the proper command line arguments should be. <o:p></o:p> The documentations says: Usage: check_log -F logfile -O oldlog -q query Usage: check_log --help Usage: check_log --version <o:p></o:p> i presume -F is the log file I want to check, and -q is the string I am searching the log for. <o:p></o:p> I have tried #./check_log -F test_log -q WARNING this just goves the following error ./check_log: test: argument expected. <o:p></o:p> what is the -O for old log?? I only have 1 log file, is the -O necessary? the documentation for this plugin is very brief. <o:p></o:p> Help Apreciated <o:p></o:p> Stuart <o:p></o:p></DIV></BLOCKQUOTE></BODY></HTML>