Logwatch alerts clear after x minutes or after specific match?

General
1

I have a group that is insisting on writing their own script and cron entry to search some logs for a string and email them if it is found. I’m pushing to keep all monitoring in CMK. What I’d like is a way to either reset a Logwatch (Linux if it matters) back to green after either:

  1. some period of time passes
  2. an “all clear” message is found in the log that signifies the problem has been fixed

I don’t think this is possible now, correct? Are there any plans for something like this?

thanks

2

Forward the log messages to the Event Console and use its more powerful possibilities.

1 Like
3

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.