Logwatch: auto "clear logs"for particular logfiles (or even particular pattern)

General
1

Hello,

Is it possible to configure Checkmk so that specific entries in specific log files generate a separate notification for each occurrence, without having to manually use the ‘Clear log’ function in the GUI?

I have a situation where a specific CRITICAL log entry appears every few minutes, and I would like to receive a separate email notification for each occurrence — even if there are 100 in a day or even in an hour.
Currently, each time such an entry appears, we have to manually click ‘Clear log’ in the GUI for a new email notification to be sent. I would like to avoid having to do that.

2

Yes, you have to wordward the log events to the eventconsole by rule:

2 Likes