1 Mar 2010 17:30
huge values with tail plugin
Hi all,
I'm using the tail plugin to monitor exim traffic and ssh failed/invalid
login.
My configuration (see below) is pretty much the same as in the man page,
but from time to time I have huge values (last was 229.1M for "Local
delivered") in the RRD database.
Does anybody what could be causing this behaviour? Any problem in my config?
regards,
Manuel
P.S.: relevant part of my config:
<Plugin "tail">
<File "/var/log/auth.log">
Instance "Failed SSH attempts"
<Match>
Regex "Failed password"
DSType "CounterInc"
Type "counter"
Instance "Failed password"
</Match>
<Match>
Regex "Failed password for invalid user"
DSType "CounterInc"
Type "counter"
Instance "Invalid users"
</Match>
</File>
(Continue reading)
RSS Feed