Zabbix Log File Monitoring

Log files are a routine of work, but very often log files serve as reactive tools and methods to understand what caused a service downtime. With Zabbix log file monitoring tools it is possible to get an alert about matched line in the file, in that way react proactively and solve the issues before they caused more serious problems.

Follow us:

[nadiasaveljevas]

Thanks so much! Very useful! It help me to solve my problem with log monitoring.

[lanceeilers]

Cool stuff :-) thanks Dmitri have a great one

[petrkrnet]

Hello,
I have one question, for what is Local timestamp. How can I use it in triggers or depend item. Use case: I have log files with timestamp, but zabbix will use own timestamp which is not accurate to logged one. Plan is sum data over timestamp. I can use sum() but it will do sum over zabbix's timestamp instead "local timestamp" parsed from log.

[fazlenasimdolon]

Awesome...!! Thank you very much dude..!! <3

[laredoeneko]

is it possible obtain 2 values from every line of the log? i.e extract ip address and time, in a apache.log

[alancostadesouza]

Can Log file be used to output multiple lines? Ex.: Every line that doesn't begin with a date format.

[Eskimoz]

Le lancement est parfait ça colle parfaitement avec le sujet. Bravo !

[BishishtBhatta]

Can we use snmp agent as a log collector? If we have a router on our zabbix monitoring, can we pass the routers log to zabbix?

[javadgorji]

Great job!
I have a question. As you mentioned for collecting log data the agent should be in active mode, if the agent is active and send the logs to server without pulling then why we should have 1s update interval in Item setting?

[yacahumax]

I edited my Server and ServerActive configuration to be the IP address of the zabbix server and I still get "Accessible only as active check" error, when trying to monitor auth.log. Any ideas?

[klp]

What ssh client author uses in this video?

[padmanabhvadyapathak]

How do I create trigger for log monitoring. I'm using the regexp in trigger but it is not working, any suggestions ?

[davidtabidze]

I have a problem, i did everything as u said but when i click check now on item i get error (Cannot send request: wrong item type.). any help? :(

[faycalnoushi]

Thanks for the video ! What would be the best practice for multiple log file filters such as extracting different status codes from access_log Apache log file ? Would using 20 log[] items imply 20 different read/parsings per sec ?

[DanilGerun]

And one more: can we get the amount of log-lines matching our request?
This way we'd trigger an alert if e.g. there are more than 1000 lines per second/minute in one file (syslog).
Or if it matches some error message, then it would be the error rate in the log-file.

[DanilGerun]

Can we capture the value from a regex back-reference (\1 or \2) into another item with numeric type? That would be awesome for e.g. monitoring Web server response time or amount of error response codes.

[bastischmid]

Hello,
i followed the steps but if an new information is written to my logfile it is monitored twice. So in the latest data history every value is duplicated. I can't find any solution for this. Do you have any idea what causes the problem?

[boyemillar]

Is there any way to monitor a log on windows servers with a variable folder name in the path... One of our systems logs each days data to a folder name made of the actual date. I could see no way t do this within Zabbix currently and had to improvise with a separate script to capture the log and make it available to zabbix in a set location. The ability to use a variable macro within the zabbix item path to the log would be great.

[supriyauppalapati]

Hi, is there a way to monitor a particular string in log file, like my string will be “test_all_string” in /var/log/messages

[rogesauron]

Hey, is it planned to make a video about custom graphs? I think would be very helpful