Log file analysis with the Nagios check_logfiles plugin

LOG TRAVELER

Article from Issue 92/2008

Author(s): GERHARD LAUSSER

The Nagios check_logfiles plugin helps you monitor your logfiles – even if the logs rotate and change names.

The Nagios monitoring tool is a general framework for watching things. Nagios lets you keep an eye on computers, processes, devices, and network services. Another thing Nagios can watch is logfiles. The Nagios plugin collection comes with a number of options for monitoring logs. The check_log and check_log2 plugins, for example, are popular with many admins; however, these plugins sometimes have problems in situations in which an application or script is rotating the logs. The tools tend to slip up occasionally and miss a couple of lines, which is something you can’t allow if you need 100% coverage. To close the gaps, the check_logfiles plugin was developed to check every single entry – even if a log moves, changes its name, or disappears into a compressed archive during the monitoring period.

Buy this article as PDF

Express-Checkout as PDF

Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES

SUBSCRIPTIONS

Print Subs

Digisubs

TABLET & SMARTPHONE APPS

US / Canada

UK / Australia

Related content

Network Monitoring Intro

If you can’t monitor everything yourself, why not let your computers watch your computers? This month we examine some practical techniques for network monitoring.

more »
Nagios Workshop

Nagios monitors your network and provides early warning for problems with hosts and services.

more »
Charly's Column – Go Access

Just as a craftsman is unlikely to purchase a new angle grinder every month, sys admins are unlikely to change constantly their tried and trusted tools. Columnist Charly Kühnast ditches this conservative philosophy this month, lured by the charms of a new logfile tool.

more »
Admin Workshop: Logrotate

Every multi-purpose Linux system produces an enormous amount of log data. To prevent your hard disk from overflowing, a rotating helper application archives logs and gets rid of obsolete data.

more »
Perl – Analyzing Log Data

Splunk has mastered the art of finding truly relevant messages in huge amounts of log data. Perlmeister Mike Schilli throws his system messages at the feet of a proprietary analysis tool and teaches the free version an enterprise feature.

more »

comments powered by Disqus

Visit Our Shop

Trial Subscription

Digital Subscription

Subscribe

Direct Download

Read full article as PDF:

032-037_logfiles_lead.pdf (321.46 kB)

News

Old Vulnerabilities Are Kept Alive Through Bad Configuration

HP's annual Cyber Risk report offers a bleak look at the state of IT.
Linus Torvalds Announces Linux 4.0

But what do the big numbers really mean?
Microsoft Frees CoreCLR

.NET , CoreCRL , open source

.NET Core execution engine is the basis for cross-platform .NET implementations.
New Trojan Attacks Linux Servers

Xnote

The Xnote trojan hides itself on the target system and will launch a variety of attacks on command.
Cisco Releases Annual Security Report

Spammers go low-volume, and 90% of IE browsers are unpatched.
Zero Day Exploits Target Flash

Adobe scrambles to release patches for vulnerable Flash Player.
Intel Unveils Compute Stick

Four-inch-long computer on a stick lets you boot a full Linux system from any HDMI display device.
Obama Proposes Personal Data Notification Law

New statute would require companies to report break-ins to consumers.
TGXf Project Warns of File Transfer through Screen Pixels

Weird data transfer technique avoids all standard security measures.
Industry Giants Announce a Fix for the Password Mess

FIDO alliance declares the beginning of the end for old-style login authentication.