/usr/share/check_mk/checks-man/logwatch.ec is in check-mk-server 1.2.6p12-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 | title: Forward Logwatch Messages to the Event Console
agents: linux, windows, aix, solaris
catalog: os/files
license: GPL
distribution: check_mk
description:
This check processes the output of agents with the logwatch plugin. The windows agent has built
in this extension. The check does not interpret or rate the incoming messages, it only reads
and forwards them to the configured Check_MK Event Console.
inventory:
One service "Log Forwarding" is created on each host when the option {logwatch_forward_to_ec} is
set to {True}.
[parameters]
parameters (dict): This check works with the following keys:
{"method"}: This value can have the following format: {None} (Default value): Tries to detect
the path to the local mkeventd event pipe. {"/path/to/pipe"}: The path to a local mkeventd
event pipe. {("udp", "127.0.0.1", 514)}: The udp host and port to forward the messages to.
{("tcp", "127.0.0.1", 514)}: The tcp host and port to forward the messages to. It can also
be configured to use the spooling mechanism of the event console. To configure this, either
configure {"socket:"} to detect the spooling directory of the local event console or
{"socket:/path/to/spool/directory"} to configure the path explicit to the local spool directory.
{"monitor_logfilelist"}: Set this to {True} if you want to get warned if the list of logfiles
has changed since the last inventory if this check.
|