/usr/share/check_mk/checks-man/logwatch.ec is in check-mk-server 1.2.8p16-1ubuntu0.1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 | title: Forward Logwatch Messages to the Event Console
agents: linux, windows, aix, solaris
catalog: os/files
license: GPL
distribution: check_mk
description:
This check processes the output of agents with the logwatch plugin. The windows agent has built
in this extension. Per default this check forwards any data to the Check_MK Event Console.
With additional configuration the messages can be reclassified to a different state via
logwatch patterns before they are forwarded to the Event Console.
inventory:
One service "Log Forwarding" is created on each host when the option {logwatch_forward_to_ec} is
set to {True}.
[parameters]
parameters (dict): This check works with the following keys:
{"method"}: This value can have the following format: {None} (Default value): Tries to detect
the path to the local mkeventd event pipe. {"/path/to/pipe"}: The path to a local mkeventd
event pipe. {("udp", "127.0.0.1", 514)}: The udp host and port to forward the messages to.
{("tcp", "127.0.0.1", 514)}: The tcp host and port to forward the messages to. It can also
be configured to use the spooling mechanism of the event console. To configure this, either
configure {"socket:"} to detect the spooling directory of the local event console or
{"socket:/path/to/spool/directory"} to configure the path explicit to the local spool directory.
{"monitor_logfilelist"}: Set this to {True} if you want to get warned if the list of logfiles
has changed since the last inventory if this check.
|