I think you have to do a transform to make it so the clear doesn't match the event - see Jane Curry's event management paper for info on what you might need to change... (Maybe put the time or something into eventclasskey?)
Any reason why you can't use syslog? -- James Pulver Information Technology Area Supervisor LEPP Computer Group Cornell University laguest wrote, On 5/5/2009 7:17 PM: > found this old post > > >> - I intend to monitor some log files using libexec/check_log. When an error >> occurs, check_log will return whatever is needed so zenoss generates an >> event. But the next time I'll run check_log, this error won't be here >> anymore, so zenoss may send a clear event that'll move to history the >> previous one, thus making it difficult to know there has been a problem. Am >> I wrong? If not, what is the right way to monitor log file (not using >> syslog) > > > I need this also, wondering if I can make a Event class for Event/Log and > have any event that maps to this not send a clear by default. This way > someone has to move the event to History. > > > > > -------------------- m2f -------------------- > > Read this topic online here: > http://forums.zenoss.com/viewtopic.php?p=34316#34316 > > -------------------- m2f -------------------- > > > > _______________________________________________ > zenoss-users mailing list > [email protected] > http://lists.zenoss.org/mailman/listinfo/zenoss-users _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
