Werk #1672: Now able to reclassify logwatch messages before forwarding them to the Event Console

Component Event Console
Title Now able to reclassify logwatch messages before forwarding them to the Event Console
Date Jan 21, 2015
Checkmk Edition Checkmk Raw (CRE)
Checkmk Version 1.2.7i1
Level Prominent Change
Class New Feature
Compatibility Compatible - no manual interaction needed

You are now able to apply already existing logwatch patterns to the messages which are sent to the Event Console. Each message can be reclassified to a different alert level and even set to IGNORED, which causes a message not to be sent to the Event Console. This pre-sorting might reduce the load of the Event Console.

Keep in mind that the logwatch pattern are configured by host and the logfile name. These restrictions do also apply to the messages intented for the Event Console. So you can configure a logwatch pattern specifially designed for a message from a certain logfile.

For example, you can reclassify any messages from a logfile access.log containing "C Login error" to "I Login error". Any message of access.log containing the "Login error" pattern will therefore get ignored and not sent to the Event Console.

To the list of all Werks