<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Re: [Nagios-users] Syslog check</TITLE>
<META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff size=2>And
even further on that subject, check_log2.pl in the contrib directory does
check_log one up by adding a -n flag...</FONT></SPAN></DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff size=2>Usage:
check_log2.pl -l <log_file> -s <log_seek_file> -p <pattern>
[-n <negpattern>]<BR>Usage: check_log2.pl [ -v | --version ]<BR>Usage:
check_log2.pl [ -h | --help ]</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff size=2>-l,
--logfile=<logfile><BR> The log file to be
scanned<BR>-s, --seekfile=<seekfile><BR> The temporary
file to store the seek position of the last scan<BR>-p,
--pattern=<pattern><BR> The regular expression to scan
for in the log file<BR>-n, --negpattern=<negpattern><BR>
The regular expression to skip in the log file<BR></FONT></SPAN></DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff size=2>From
my quick use of the two, I would recommend the check_log2.pl just because it
happens to give you the flexibility to not only say find me something, but find
me something... but if it has something else in it as well, dont trigger an
alarm (the -n)</FONT></SPAN></DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=085425314-05122003><FONT face=Arial color=#0000ff
size=2>-ed</DIV></FONT></SPAN>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Marc Powell
[mailto:marc@ena.com]<BR><B>Sent:</B> Friday, December 05, 2003 9:11
AM<BR><B>To:</B> mlist.nagios@inlan.inmics.fi;
nagios-users@lists.sourceforge.net<BR><B>Subject:</B> Re: [Nagios-users]
Syslog check<BR><BR></FONT></DIV><!-- Converted from text/plain format -->
<P><FONT size=2>Not that it's obvious but check_log handles
that.<BR><BR><BR><BR>--<BR>Marc<BR><BR>-----Original Message-----<BR>From:
MiikaT <mlist.nagios@inlan.inmics.fi><BR>To:
nagios-users@lists.sourceforge.net
<nagios-users@lists.sourceforge.net><BR>Sent: Fri Dec 05 07:41:06
2003<BR>Subject: [Nagios-users] Syslog check<BR><BR>Hi,<BR><BR>is there a
plugin for nagios, which could parse certain entries from syslog or<BR>any
other log files and create
alerts?<BR><BR>-MiikaT<BR><BR><BR><BR><BR>-------------------------------------------------------<BR>This
SF.net email is sponsored by: SF.net Giveback Program.<BR>Does SourceForge.net
help you be more productive? Does it<BR>help you create better
code? SHARE THE LOVE, and help us help<BR>YOU! Click Here: <A
href="http://sourceforge.net/donate/">http://sourceforge.net/donate/</A><BR>_______________________________________________<BR>Nagios-users
mailing list<BR>Nagios-users@lists.sourceforge.net<BR><A
href="https://lists.sourceforge.net/lists/listinfo/nagios-users">https://lists.sourceforge.net/lists/listinfo/nagios-users</A><BR>:::
Please include Nagios version, plugin version (-v) and OS when reporting any
issue.<BR>::: Messages without supporting info will risk being sent to
/dev/null<BR></FONT></P></BLOCKQUOTE></BODY></HTML>