Zabbix Log Collection

https://techexpert.tips/zabbix/zabbix-monitor-log-file-linux/

For Redhat

sudo chown :zabbix /var/log/messages
sudo chmod 0640 /var/log/messages

For Ubuntu

sudo useradd -aG adm zabbix

Template

item key: log[/var/log/messages,(?i)error]
Trigger Expression: {template-name:log[/var/log/messages,(?i)error].iregexp(error,100)}=1

Refs

• https://www.zabbix.com/documentation/current/manual/regular_expressions
• https://techexpert.tips/zabbix/zabbix-monitor-log-file-linux/
• https://blog.zabbix.com/zabbix-log-file-monitoring/7378/