Logwatch: deleting or acknowledge individual entries
At the moment the logwatch plugin of Checkmk allows for log entries to be detected via patterns and then being copied onto the monitoring server in order to view errors and warnings. In order to acknowledge these properly and reset the status it's currently required to clear the entire log. Because of how we handle these logs it would be better if we could individually select an entry and only clear those or maybe delete via a pattern e.g. all errors that include Code:404 should be cleared. The best way to implemented this likely would be the pattern solution as literally deleting each entry individually would also not be that efficient.
Comments: 1
Oldest
•
Newest
•
Most likes
•
Fewest likes
-
17 Mar
Niklas Pulina AdminHi GAPLAST, thank you for your suggestion.
To help us understand your use case better, could you please specify it in further detail? Do I understand you correctly in a sense that you are forwarding log lines to the Event Console via the logwatch plugin and would like to have a better handling of the Events under "Monitor > Event Console > Events"?
Thanks and best regards – Niklas