I am just starting with nagios and so far I have learned quite a bit and have successfully setup multiple nagios checks on several servers and all of them are working as expected. <br><br>I've been trying to setup the check_logfiles plugin to check for a pattern like this: where someone attempted to login to one of my applications several times within milliseconds. is there a way that I can configure the nagios check_logfiles plugin to parse multiple login attempts as shown below within seconds and send me an alert? of would it be better to write a custom script to do that?<br>
<br>Thanks for your help.<br><br><br><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">
77.221.134.186 - - [05/Apr/2012:08:06:23 -0600] "GET /sms/login/emailpwd?uname=bossman2040&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:25 -0600] "GET /sms/login/emailpwd?uname=u002422&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:25 -0600] "GET /sms/login/emailpwd?uname=suzzie&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:26 -0600] "GET /sms/login/emailpwd?uname=BlackBox&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:27 -0600] "GET /sms/login/emailpwd?uname=Bigboss83&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:28 -0600] "GET /sms/login/emailpwd?uname=copcarsonline&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:28 -0600] "GET /sms/login/emailpwd?uname=u002422&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41 - - [05/Apr/2012:08:06:29 -0600] "GET /sms/login/emailpwd?uname=juanyromo&email= HTTP/1.1" 200 5608 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" "-"</div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font:normal normal normal 12px/normal Helvetica">176.9.53.41</div><br><br><div class="gmail_quote">On Thu, Apr 5, 2012 at 1:24 PM, Edgarosy <span dir="ltr"><<a href="mailto:edgarosy@gmail.com">edgarosy@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div bgcolor="#FFFFFF"><div>Thank you Claudio.<br><br><div>CONFIDENTIALITY NOTICE: This message and any attachment(s) are solely for the use of the intended recipient(s) identified above and may contain information that is proprietary, privileged, or confidential. If you are not an intended recipient, you may not review, retransmit, or otherwise use this message or any attachment. If you have received this message in error, please immediately notify the sender by reply e-mail and delete this message.</div>
<div><br></div><div><br></div></div><div><div class="h5"><div><br>On Apr 5, 2012, at 1:18 PM, Claudio Kuenzler <<a href="mailto:ck@claudiokuenzler.com" target="_blank">ck@claudiokuenzler.com</a>> wrote:<br><br></div>
<div></div><blockquote type="cite"><div>This one is probably the best one:<br><a href="http://labs.consol.de/lang/en/nagios/check_logfiles/" target="_blank">http://labs.consol.de/lang/en/nagios/check_logfiles/</a><br><br>
<div class="gmail_quote">On Thu, Apr 5, 2012 at 6:56 PM, Parkman, Mikhail <span dir="ltr"><<a href="mailto:Mikhail_Parkman@cable.comcast.com" target="_blank">Mikhail_Parkman@cable.comcast.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal">I need to perform the following tasks:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> Demonstrated that Nagios alert is fired when certain messages are logged in the application log file on the
target (remote) host<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:Symbol">·</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""> Nagios "info message" is fired when error condition is cleared.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">I found out “logwarn” plugin but I didn’t find detailed configuration instructions for this plugin.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><a href="http://exchange.nagios.org/directory/Plugins/Log-Files/check_logwarn/details" target="_blank">http://exchange.nagios.org/directory/Plugins/Log-Files/check_logwarn/details</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">And another one – “check_logfiles” – this one is described better in my opinion but referring to something called OPSVIEW that I don’t have any idea about.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><a href="http://www.osupport.net/2011/log-files-monitoring-with-nagios-opsview/" target="_blank">http://www.osupport.net/2011/log-files-monitoring-with-nagios-opsview/</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">Did somebody have experience with well documented “check log” plugin, and could recommend one so that the functionality of the recommended plugin matches bulleted tasks
in the beginning of this email that I have to accomplish?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">Thanks.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">Mikhail.<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>------------------------------------------------------------------------------<br>
Better than sec? Nothing is better than sec when it comes to<br>
monitoring Big Data applications. Try Boundary one-second<br>
resolution app monitoring today. Free.<br>
<a href="http://p.sf.net/sfu/Boundary-dev2dev" target="_blank">http://p.sf.net/sfu/Boundary-dev2dev</a><br>_______________________________________________<br>
Nagios-users mailing list<br>
<a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank">Nagios-users@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br>
::: Messages without supporting info will risk being sent to /dev/null<br></blockquote></div><br>
</div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br><span>Better than sec? Nothing is better than sec when it comes to</span><br>
<span>monitoring Big Data applications. Try Boundary one-second </span><br><span>resolution app monitoring today. Free.</span><br><span><a href="http://p.sf.net/sfu/Boundary-dev2dev" target="_blank">http://p.sf.net/sfu/Boundary-dev2dev</a></span></div>
</blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Nagios-users mailing list</span><br><span><a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank">Nagios-users@lists.sourceforge.net</a></span><br>
<span><a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a></span><br><span>::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. </span><br>
<span>::: Messages without supporting info will risk being sent to /dev/null</span></div></blockquote></div></div></div></blockquote></div><br><br clear="all"><br>-- <br>Edgar Lanz<br><br>"If nobody is perfect I must be nobody"<br>