Hi CheckMK Friends. I have a problem with our checkMK. We have 6 domain controllers which are monitored by check MK, however all of the Domain controllers are very busy and therefor the logs fill up very quickly. After clearing the log from checkMK we I get the ‘Unacknowledged messages have exceed…

[image] hugh.laverty: There is a stipulation that all logs should be picked up by checkMK, so turning off the logwatch for that server is not an option. Is there a way to increase the 500kb size or a way to ‘rotate’ the logs so we don’t hit the 500kb limit? CheckMK is not a log sink where yo…

Hi Andreas, thank you for your reply. Yes, agreed that CheckMK is not a log sink, we are currently in the process of setting up Splunk. Is there a way, within logwatch to only log critical and warnings? I’ve set the windows logging level to ‘write to the log file only most important events’ and c…

You need to check if your client has also this settings. Is the automatic agent updater in use in your system? Please check the yaml files on the machine if there are these settings active.

Hi, if you have too much logs from your DCs you should forward them to the Event Console. There you will be able to handle the logs by using regex for Event ID and you can drop the unwanted entries automatically based on time. Greets, Christian

[image] andreas-doehler: If you need a real log sink please use a second tool like greylog, ELK stack, Logpoint or Splunk beside CheckMK. For those who prefer Open Source alternatives, look at Grafana/Loki or OpenSearch.

Hi All, Thank you for your suggestions. I have managed to drastically reduce the amount of logs being brought into check MK. As we have the updater enabled but the checkmk agents were not registered with the update agent, so i spent time registering all the servers which allowed the ‘write to the…

Checkmk Forum

Unacknowledged messages being dropped

Troubleshooting

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled

Update cookie preferences