-
Incident report
-
Resolution: Fixed
-
Major
-
2.2.10
?Default message
Date: {EVENT.DATE} {EVENT.TIME}
Event: {TRIGGER.NAME}
Status: {TRIGGER.STATUS}
Severity: {TRIGGER.SEVERITY}
Item values:
{ITEM.NAME1} ({HOST.NAME1}:{ITEM.KEY1}): {ITEM.VALUE1}
Original event ID: {EVENT.ID}
?Get the log
Jan 4 01:30:21 host01 message ccc Jan 4 01:30:21 host01 message bbb Dec 29 20:24:24 host01 message aaa Dec 29 20:24:24 host01 message aaa
?event list
"2016/01/04 01:26:09","host01","trigger01","PROBLEM","High","0","No","51" "2016/01/04 01:26:09","host01","trigger01","PROBLEM","High","0","No","51" "2015/12/29 20:24:39","host01","trigger01","PROBLEM","High","5d 5h 1m","No","41" "2015/12/29 20:24:39","host01","trigger01","PROBLEM","High","0","No","41"
?alert message
Date: 2016/01/04 01:26:09 Event: trigger01 Status: PROBLEM Severity: High Item values: item01 (host01:log[/var/log/messages,Error,UTF-8]): Dec 29 20:24:24 host01 message aaa Original event ID: xxxxxx
The event was detected on January 4.
Why, the value of the ITEM.VALUE is December 29?