Logwatch plugin deployed but not appearing in console

Hi,

Per the subject, I’ve deployed the logwatch_ec.py plugin (I think, anyway!), have a logwatch.cfg under /etc/check_mk, but can’t get the console to discover the service. Am obviously missing something (probably quite obvious) but haven’t been able to find a definitive answer in the docs or forum search so any advice would be gratefully appreciated!

Many thanks,

IanM

**CMK version: Checkmk Raw Edition 2.2.0p8
**OS version: Red Hat Enterprise Linux release 9.1

**Error message: no error

Output of “cmk --debug -vvn hostname”:

[root@checkmk_host conf]# omd su stlnagios
Last login: Mon Sep 4 14:10:56 UTC 2023 on pts/0
OMD[stlnagios]:~$ cmk --debug -vvn hostname.domain.tld
Checkmk version 2.2.0p8

  • FETCHING DATA
    Source: SourceInfo(hostname=‘hostname.domain.tld’, ipaddress=‘10.202.128.20’, ident=‘agent’, fetcher_type=<FetcherType.TCP: 8>, source_type=<SourceType.HOST: 1>)
    [cpu_tracking] Start [7fe60822a510]
    Read from cache: AgentFileCache(hostname.domain.tld, path_template=/omd/sites/stlnagios/tmp/check_mk/cache/{hostname}, max_age=MaxAge(checking=0, discovery=120, inventory=120), simulation=False, use_only_cache=False, file_cache_mode=6)
    Not using cache (Too old. Age is 111 sec, allowed is 0 sec)
    [TCPFetcher] Execute data source
    Connecting via TCP to 10.202.128.20:6556 (15.0s timeout)
    Detected transport protocol: TransportProtocol.PLAIN (b’<<')
    Reading data from agent
    Closing TCP connection to 10.202.128.20:6556
    Write data to cache file /omd/sites/stlnagios/tmp/check_mk/cache/hostname.domain.tld
    Trying to acquire lock on /omd/sites/stlnagios/tmp/check_mk/cache/hostname.domain.tld
    Got lock on /omd/sites/stlnagios/tmp/check_mk/cache/hostname.domain.tld
    Releasing lock on /omd/sites/stlnagios/tmp/check_mk/cache/hostname.domain.tld
    Released lock on /omd/sites/stlnagios/tmp/check_mk/cache/hostname.domain.tld
    [cpu_tracking] Stop [7fe60822a510 - Snapshot(process=posix.times_result(user=0.0, system=0.0, children_user=0.0, children_system=0.0, elapsed=5.28000000026077))]
    Source: SourceInfo(hostname=‘hostname.domain.tld’, ipaddress=‘10.202.128.20’, ident=‘piggyback’, fetcher_type=<FetcherType.PIGGYBACK: 4>, source_type=<SourceType.HOST: 1>)
    [cpu_tracking] Start [7fe6082d6f90]
    Read from cache: NoCache(hostname.domain.tld, path_template=/dev/null, max_age=MaxAge(checking=0.0, discovery=0.0, inventory=0.0), simulation=False, use_only_cache=False, file_cache_mode=1)
    [PiggybackFetcher] Execute data source
    No piggyback files for ‘hostname.domain.tld’. Skip processing.
    No piggyback files for ‘10.202.128.20’. Skip processing.
    [cpu_tracking] Stop [7fe6082d6f90 - Snapshot(process=posix.times_result(user=0.0, system=0.0, children_user=0.0, children_system=0.0, elapsed=0.0))]
  • PARSE FETCHER RESULTS
    <<<check_mk>>> / Transition NOOPParser → HostSectionParser
    <<<cmk_agent_ctl_status:sep(0)>>> / Transition HostSectionParser → HostSectionParser
    <<<checkmk_agent_plugins_lnx:sep(0)>>> / Transition HostSectionParser → HostSectionParser
    <<labels:sep(0)>> / Transition HostSectionParser → HostSectionParser
    <<<df_v2>>> / Transition HostSectionParser → HostSectionParser
    <<<df_v2>>> / Transition HostSectionParser → HostSectionParser
    <<<systemd_units>>> / Transition HostSectionParser → HostSectionParser
    <<<nfsmounts_v2:sep(0)>>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<<ps_lnx>>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<<lnx_if>>> / Transition HostSectionParser → HostSectionParser
    <<<lnx_if:sep(58)>>> / Transition HostSectionParser → HostSectionParser
    <<<tcp_conn_stats>>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<<vbox_guest>>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<chrony:cached(1693841862,120)>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<>> / Transition HostSectionParser → HostSectionParser
    <<local:sep(0)>> / Transition HostSectionParser → HostSectionParser
    HostKey(hostname=‘hostname.domain.tld’, source_type=<SourceType.HOST: 1>) → Add sections: [‘check_mk’, ‘checkmk_agent_plugins_lnx’, ‘chrony’, ‘cifsmounts’, ‘cmk_agent_ctl_status’, ‘cpu’, ‘df_v2’, ‘diskstat’, ‘job’, ‘kernel’, ‘labels’, ‘lnx_if’, ‘local’, ‘md’, ‘mem’, ‘mounts’, ‘mrpe’, ‘nfsmounts_v2’, ‘ps_lnx’, ‘systemd_units’, ‘tcp_conn_stats’, ‘uptime’, ‘vbox_guest’]
    HostKey(hostname=‘hostname.domain.tld’, source_type=<SourceType.HOST: 1>) → Add sections:
    Received no piggyback data
    [cpu_tracking] Start [7fe607804550]
    value store: synchronizing
    Trying to acquire lock on /omd/sites/stlnagios/tmp/check_mk/counters/hostname.domain.tld
    Got lock on /omd/sites/stlnagios/tmp/check_mk/counters/hostname.domain.tld
    value store: loading from disk
    Releasing lock on /omd/sites/stlnagios/tmp/check_mk/counters/hostname.domain.tld
    Released lock on /omd/sites/stlnagios/tmp/check_mk/counters/hostname.domain.tld
    CPU load 15 min load: 0.09, 15 min load per core: 0.02 (4 cores)
    CPU utilization Total CPU: 2.34%
    Disk IO SUMMARY Read: 0.00 B/s, Write: 114 kB/s, Latency: 724 microseconds
    Filesystem / Used: 32.48% - 6.49 GiB of 20.0 GiB, trend per 1 day 0 hours: -33.3 MiB, trend per 1 day 0 hours: -0.16%
    Filesystem /mnt/oracle/arch Used: 7.34% - 1.44 GiB of 19.6 GiB, trend per 1 day 0 hours: -74.1 MiB, trend per 1 day 0 hours: -0.37%
    Filesystem /ora01 Used: 57.86% - 11.3 GiB of 19.6 GiB, trend per 1 day 0 hours: -69.8 MiB, trend per 1 day 0 hours: -0.35%
    Filesystem /ora01/oradata Used: 53.33% - 26.2 GiB of 49.2 GiB, trend per 1 day 0 hours: +37.7 MiB, trend per 1 day 0 hours: +0.07%, Time left until disk full: 1 year 259 days
    Interface eth0 [2], (up), MAC: 02:37:74:67:4A:28, Speed: unknown, In: 1.01 kB/s (<0.01%/125 MB/s), Out: 8.89 kB/s (<0.01%/125 MB/s)
    Kernel Performance Process Creations: 3.55/s, Context Switches: 5737.94/s, Major Page Faults: 0.00/s, Page Swap in: 0.00/s, Page Swap Out: 0.00/s
    Memory Total virtual memory: 16.87% - 2.61 GiB of 15.5 GiB, 8 additional details available
    Mount options of / Mount options exactly as expected
    Mount options of /mnt/oracle/arch Mount options exactly as expected
    Mount options of /ora01 Mount options exactly as expected
    Mount options of /ora01/oradata Mount options exactly as expected
    NFS mount /mnt/oracle/backup Source: 127.0.0.1:/, Used: <0.01% - 112 GiB of 8.00 EiB, trend per 1 day 0 hours: -3.37 GiB, trend per 1 day 0 hours: -0.00%
    NTP Time Offset: 0.0019 ms, Stratum: 4, Time since last sync: 54 seconds
    Number of threads 452, Usage: 0.36%
    Process /usr/sbin/sshd -D -oCiphersaes256-gcm@openssh.comchacha20-poly1305@openssh.comaes256-ctraes256-cbcaes128-gcm@openssh.comaes128-ctraes128-cbc -oMACshmac-sha2-256-etm@openssh.comhmac-sha1-etm@openssh.comumac-128-etm@openssh.comhmac-sha2-512-etm@openssh.comhmac-sha2-256hmac-sha1umac-128@openssh.comhmac-sha2-512 -oGSSAPIKexAlgorithmsgss-curve25519-sha256-gss-nistp256-sha256-gss-group14-sha256-gss-group16-sha512-gss-gex-sha1-gss-group14-sha1- -oKexAlgorithmscurve25519-sha256curve25519-sha256@libssh.orgecdh-sha2-nistp256ecdh-sha2-nistp384ecdh-sha2-nistp521diffie-hellman-group-exchange-sha256diffie-hellman-group14-sha256diffie-hellman-group16-sha512diffie-hellman-group18-sha512diffie-hellman-group-exchange-sha1diffie-hellman-group14-sha1 -oHostKeyAlgorithmsecdsa-sha2-nistp256ecdsa-sha2-nistp256-cert-v01@openssh.comecdsa-sha2-nistp384ecdsa-sha2-nistp384-cert-v01@openssh.comecdsa-sha2-nistp521ecdsa-sha2-nistp521-cert-v01@openssh.comssh-ed25519ssh-ed25519-cert-v01@openssh.comrsa-sha2-256rsa-sha2-256-cert-v01@openssh.comrsa-sha2-512rsa-sha2-512-cert-v01@openssh.comssh-rsassh-rsa-cert-v01@openssh.com -oPubkeyAcceptedKeyTypesecdsa-sha2-nistp256ecdsa-sha2-nistp256-cert-v01@openssh.comecdsa-sha2-nistp384ecdsa-sha2-nistp384-cert-v01@openssh.comecdsa-sha2-nistp521ecdsa-sha2-nistp521-cert-v01@openssh.comssh-ed25519ssh-ed25519-cert-v01@openssh.comrsa-sha2-256rsa-sha2-256-cert-v01@openssh.comrsa-sha2-512rsa-sha2-512-cert-v01@openssh.comssh-rsassh-rsa-cert-v01@openssh.com -oCASignatureAlgorithmsecdsa-sha2-nistp256ecdsa-sha2-nistp384ecdsa-sha2-nistp521ssh-ed25519rsa-sha2-256rsa-sha2-512ssh-rsa Processes: 1, Virtual memory: 90.3 MiB, Resident memory: 2.45 MiB, CPU: 0%, Running for: 136 days 2 hours
    Systemd Service Summary Total: 140, Disabled: 10, Failed: 0
    Systemd Socket Summary Total: 15, Disabled: 0, Failed: 0
    TCP Connections Established: 88
    Uptime Up since Oct 24 2022 09:42:43, Uptime: 315 days 5 hours
    login_database1 OK - dummy login connected
    login_database2 OK - dummy login connected
    No piggyback files for ‘hostname.domain.tld’. Skip processing.
    No piggyback files for ‘10.202.128.20’. Skip processing.
    [cpu_tracking] Stop [7fe607804550 - Snapshot(process=posix.times_result(user=0.010000000000000009, system=0.0, children_user=0.0, children_system=0.0, elapsed=0.019999999552965164))]
    [agent] Success, [piggyback] Success (but no data found for this host), execution time 5.3 sec | execution_time=5.300 user_time=0.010 system_time=0.000 children_user_time=0.000 children_system_time=0.000 cmk_time_agent=5.280

Minor update - I setup a “rule” (I think) and now have logwatch appearing in the console for some (Windows) servers but not the one I’m interested in (which is Linux). Very confused :expressionless: