Logwatch: auto "clear logs"for particular logfiles (or even particular pattern)

General
1

Hello,

Is it possible to configure Checkmk so that specific entries in specific log files generate a separate notification for each occurrence, without having to manually use the ‘Clear log’ function in the GUI?

I have a situation where a specific CRITICAL log entry appears every few minutes, and I would like to receive a separate email notification for each occurrence — even if there are 100 in a day or even in an hour.
Currently, each time such an entry appears, we have to manually click ‘Clear log’ in the GUI for a new email notification to be sent. I would like to avoid having to do that.

2

Yes, you have to wordward the log events to the eventconsole by rule:

2 Likes
3

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.