Home / server / Questions / 240838
In Process
Supratik
Asked: 2011-02-28 05:35:18 +0800 CST

Log monitoring using Zabbix

  • 772

I am trying to monitor a log file using Zabbix 1.8.4.

I created an item using the following details:

Host: Zabbix server
Description: logger_test
Type: Zabbix agent (active)
Key: log[/tmp/scribetest/test3/test3_current,error,,100]
Type of Infromation: Log
Update interval (in sec): 1 sec
Keep history (in days): 90
Status: Active
Applications: Log files

I created a trigger and attached it with the item logger_test using the following details:

Name: logger_test_trigger
Expression: {Zabbix server:log[/tmp/scribetest/test3/test3_current,error,,100].str(error)}=1
Severity: disaster

The above settings works fine for the first time but next time the trigger shows ZBX_NOTSUPPORTED and after that item also shows "not supported" message.

Can you please tell me if anything I am doing wrong here ?

zabbix

3 Answers

  1. It might be an access issue - Zabbix typically runs as an unprivileged user and if the log file in question is not readable by it, then you will get that error.

    If that isn't the case, I suggest you enable loggin on the agent and examine the log - this usually provides useful information.

    • 2

  2. Do you really need polling the log each sec? The item's becoming unsupported due to some bottleneck. Try changing it to something like 20sec and it probably will go away. Else, try tweaking your zabbix_agentd.conf, can't recall if you have to change MaxLinesPerSecond= for this case or it's another parameter.

    • 0

  3. This type of error usually indicates an error in the Zabbix key although your format matches the documentation. I would do the following to try and narrow down the cause:

    • When an item/trigger isn't working start with the bare minimum setup. Disable/remove the trigger and use the simplest item key possible (in this case just log[/tmp/scribetest/test3/test3_current]).
    • Make sure the log file exists and is readable by Zabbix on the client.
    • Check the log files both on the Zabbix server and client. For example, on my setup I was getting "No active checks found on server: host not found" errors which indicates some sort of Zabbix configuration issue preventing all active checks from working.
    • 0