Hi Thomas, Thanks for pointing met to check_log3, but i'm not sure if its what i'm looking for after I tested it. I didn't test the GroundWork yet because at this moment I only use Nagios.
The thing that I am looking for is as follows, I want to get my Nagios notification e-mail as follows: ***** Nagios 2.8 ***** Notification Type: PROBLEM Host: NAGIOS State: DOWN Address: ***.***.***.*** Info: Syslog messages $DEVICENAME$ has reported the following syslog messages over the last 5 minutes: Emergencies: -emergencie message 1 -emergencie message 1 Alerts: -alert message 1 Critical: -etc... Date/Time: Mon Mar 19 13:21:07 CET 200 ..Or something like that. Group those messages together is also a posibility but I prefer the above methode. Is this posible with the Groundwork Foundation? or must I write some custom script? (don't hope so because I'm not that good of a programmer..maybe someone can help?) chiel ----- Original Message ----- From: "Thomas Stocking" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "chiel" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, April 11, 2007 9:20 PM Subject: Re: [Nagios-users] Nagios sents notifi immideatly after recieving syslog error > Well, yes...or do it at the plugin level. > I mean, what about writing the syslog messages to a log file that you > parse every 5 minutes? There are plugins like check_log3 that do this, and > they can be set to filter for regex expressions. > Another way would be to use syslog-ng to accept and filter the syslog > messages, and post them to Nagios as passive checks via a program that > does some consolidation/filtering for you. > We have done this using the Foundation database in GroundWork - post the > messages there, and then query periodically to find the conditions you > want an alert for with a simple perl plugin. > FYI GroundWork Foundation is now bundled into GroundWork Monitor Open > Source 5.1. > Thomas > > http://www.nagiosexchange.org/Solaris.50.0.html?&tx_netnagext_pi1[p_view]=423 > http://www.balabit.com/products/syslog_ng/ > http://gwfoundation.sourceforge.net/ > http://www.groundworkopensource.com/downloads/full_download.html > > Andy Shellam wrote: >> At first glance I'd say you'd need to write your own notification handler >> that does this for you. >> It would be much easier to write, say, a shell script that takes the >> notification details as parameters to the script. >> >> That way your script can then do much greater filtering than Nagios alone >> does. >> >> Andy. >> >> chiel wrote: >> >>> Hello, >>> On some of my network devices I have set up syslog to send there >>> results to Nagios trough passive checks. This works perfectly. >>> When syslog sents a error messages Nagios immideatly sents a >>> notification e-mail/sms. >>> The thing is that when syslog sent for example 20 error messages from >>> one device within 5 secondes I also get 20 e-mail/sms notifications. >>> Is there a way that Nagios waits for (let say) 5 minutes, after the >>> first error hase been received, and than sents these 20 error messages >>> all in one notification? >>> chiel >>> !DSPAM:37,461cecf489294516711538! >>> ------------------------------------------------------------------------ >>> >>> ------------------------------------------------------------------------- >>> Take Surveys. Earn Cash. Influence the Future of IT >>> Join SourceForge.net's Techsay panel and you'll get the chance to share >>> your >>> opinions on IT & business topics through brief surveys-and earn cash >>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >>> >>> !DSPAM:37,461cecf489294516711538! >>> ------------------------------------------------------------------------ >>> >>> _______________________________________________ >>> Nagios-users mailing list >>> [EMAIL PROTECTED] >>> https://lists.sourceforge.net/lists/listinfo/nagios-users >>> ::: Please include Nagios version, plugin version (-v) and OS when >>> reporting any issue. ::: Messages without supporting info will risk >>> being sent to /dev/null >>> >>> !DSPAM:37,461cecf489294516711538! >>> >> >> >> ------------------------------------------------------------------------- >> Take Surveys. Earn Cash. Influence the Future of IT >> Join SourceForge.net's Techsay panel and you'll get the chance to share >> your >> opinions on IT & business topics through brief surveys-and earn cash >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >> _______________________________________________ >> Nagios-users mailing list >> [EMAIL PROTECTED] >> https://lists.sourceforge.net/lists/listinfo/nagios-users >> ::: Please include Nagios version, plugin version (-v) and OS when >> reporting any issue. ::: Messages without supporting info will risk being >> sent to /dev/null >> ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nagios-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
