Re: Monitoring alert.log

Chuck,

    We use "swatch" for most log files (application, database, OS). It requires Perl. Check it out at http://oit.ucsb.edu/~eta/swatch/.

Best regards,
Jon Warnick

"Chuck Hamilton" <chuck_hamilton_at_yahoo.com> wrote in message news:9odghg$ckeu2$1_at_ID-85580.news.dfncis.de...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Has anyone ever tried to do real-time or near real-time monitoring of
> the alert log for new messages on a unix system? How did you do it? I
> want to do it but don't want to change the name of the alert log or
> copy it to some other file.
>
> What do you think of this idea. Run a cron job every few minutes
> that:
> 1. appends a comment with an embedded sequential counter to the alert
> log.
> 2. reads the previous sequential counter from a separate file
> 3. uses sed to extract everything between the previous counter and
> the new counter and scans those lines for error messages
> 4. writes the new counter to the separate file to be used as the
> starting point for the next time it runs.
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
>
> iQA/AwUBO6ofAmm5A4kkb4ZsEQJ5xQCbB30JtCT4WfFTzdtN9z5o19dHM48Aniqp
> 4ZEvd3FyBZsZiFtTzKNoYA/F
> =4+9A
> -----END PGP SIGNATURE-----
>
>
>
Received on Thu Sep 20 2001 - 18:11:55 CDT