[ZBX-10153] When specifying logrt skip to item key, Agent lost the log. Created: 2015 Dec 11  Updated: 2017 May 30  Resolved: 2015 Dec 11

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G)
Affects Version/s: None
Fix Version/s: None

Type: Incident report Priority: Major
Reporter: Junichi Sakuyama Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

HP-UX 11.11
Zabbix Agent 2.0.10-3


Issue Links:
Duplicate
duplicates ZBXNEXT-444 Improvement processing of event logs ... Closed

 Description   

procedure
---------
1.specify logrt skip to item key.
(a)logrt["test.*.log",ERR,,,skip]
(b)logrt["test.*.log",INFO,,,skip]
2.start agent.
3.write INFO string to logfile. (file size of logfile is not 0.)
4.wait for INFO data to be displayed by a history screen.
5.stop agent.
6.write ERR string to logfile.
7.start agent.
8.agent skipped written ERR string.

The agent receive 0 of lastlogsize of (a) from the server at the time of the second start (No.7), because agent has not sent log data of item(a) which results in the server doesn't receive lastlogsize data from agent.
Therefore the agent skipped written ERR string log.

However, We think it is lost ERR string, because of the agent starts once.

Whether this is restrictions or is it a bug?

Thank you.



 Comments   
Comment by Alexander Vladishev [ 2015 Dec 11 ]

Already fixed under ZBXNEXT-444 in pre-3.0.0alpha1. I close the issue as duplicate.

Comment by Andris Mednis [ 2015 Dec 11 ]

logrt[] 'skip' option is tricky: it is effective only on new logrt[] items which haven't yet found their first matching log line. After the first matching line is found and sent to server, the 'skip' option has no further effect. This explains why the ERR string was ignored - because of 'skip' option. More info in ZBX-9918 and ZBXNEXT-444.

Generated at Thu Apr 25 09:30:52 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.