# Icinga 2 v2.14.3 lib/base/streamlogger.cpp ProcessLogEntry: "[%Y-%m-%d %H:%M:%S %z] " when timestamps are on, then severity "/" facility ": " message; lib/base/logger.cpp SeverityToString: debug notice information warning critical
# Lines from Elastic beats v9.5.5 filebeat/module/icinga tests
[2017-04-04 13:43:09 +0200] debug/GraphiteWriter: Add to metric list:'icinga2.demo.services.procs.procs.perfdata.procs.warn 250 1491306189'. ⇒ {"rule": "icinga", "level": "debug", "name": "GraphiteWriter", "message": "GraphiteWriter: Add to metric list:'icinga2.demo.services.procs.procs.perfdata.procs.warn 250 1491306189'.", "prefixed": true}
[2017-04-04 13:43:09 +0200] debug/IdoMysqlConnection: Query: UPDATE icinga_servicestatus SET acknowledgement_type = '0',  active_checks_enabled = '1',  check_command = 'mysql_health',  check_source = 'demo',  check_type = '0',  current_check_attempt = '1',  current_notification_number = '180',  current_state = '2',  endpoint_object_id = 242,  event_handler = '',  event_handler_enabled = '1',  execution_time = '0.355594',  flap_detection_enabled = '0',  has_been_checked = '1',  instance_id = 1,  is_flapping = '0',  is_reachable = '1',  last_check = FROM_UNIXTIME(1491306189),  last_hard_state = '2',  last_hard_state_change = FROM_UNIXTIME(1491290599),  last_notification = FROM_UNIXTIME(1491304989),  last_state_change = FROM_UNIXTIME(1491290599),  last_time_critical = FROM_UNIXTIME(1491306189),  last_time_unknown = FROM_UNIXTIME(1491290589),  latency = '0.001466',  long_output = '',  max_check_attempts = '5',  next_check = FROM_UNIXTIME(1491306198),  next_notification = FROM_UNIXTIME(1491306789),  normal_check_interval = '0.166667',  notifications_enabled = '1',  original_attributes = 'null',  output = 'CRITICAL - cannot connect to information_schema. Access denied for user \'test1\'@\'blerims-mbp.int.netways.de\' (using password: YES)',  passive_checks_enabled = '1',  percent_state_change = '0',  perfdata = '',  problem_has_been_acknowledged = '0',  process_performance_data = '1',  retry_check_interval = '0.166667',  scheduled_downtime_depth = '0',  service_object_id = 333,  should_be_scheduled = '1',  state_type = '1',  status_update_time = FROM_UNIXTIME(1491306189) WHERE service_object_id = 333 ⇒ {"rule": "icinga", "level": "debug", "name": "IdoMysqlConnection", "message": "IdoMysqlConnection: Query: UPDATE icinga_servicestatus SET acknowledgement_type = '0',  active_checks_enabled = '1',  check_command = 'mysql_health',  check_source = 'demo',  check_type = '0',  current_check_attempt = '1',  current_notification_number = '180',  current_state = '2',  endpoint_object_id = 242,  event_handler = '',  event_handler_enabled = '1',  execution_time = '0.355594',  flap_detection_enabled = '0',  has_been_checked = '1',  instance_id = 1,  is_flapping = '0',  is_reachable = '1',  last_check = FROM_UNIXTIME(1491306189),  last_hard_state = '2',  last_hard_state_change = FROM_UNIXTIME(1491290599),  last_notification = FROM_UNIXTIME(1491304989),  last_state_change = FROM_UNIXTIME(1491290599),  last_time_critical = FROM_UNIXTIME(1491306189),  last_time_unknown = FROM_UNIXTIME(1491290589),  latency = '0.001466',  long_output = '',  max_check_attempts = '5',  next_check = FROM_UNIXTIME(1491306198),  next_notification = FROM_UNIXTIME(1491306789),  normal_check_interval = '0.166667',  notifications_enabled = '1',  original_attributes = 'null',  output = 'CRITICAL - cannot connect to information_schema. Access denied for user \\'test1\\'@\\'blerims-mbp.int.netways.de\\' (using password: YES)',  passive_checks_enabled = '1',  percent_state_change = '0',  perfdata = '',  problem_has_been_acknowledged = '0',  process_performance_data = '1',  retry_check_interval = '0.166667',  scheduled_downtime_depth = '0',  service_object_id = 333,  should_be_scheduled = '1',  state_type = '1',  status_update_time = FROM_UNIXTIME(1491306189) WHERE service_object_id = 333"}
[2017-04-04 13:43:11 +0200] notice/Process: Running command '/usr/lib/nagios/plugins/check_ping' '-H' 'mysql.icinga.com' '-c' '5000,100%' '-w' '3000,80%': PID 8288 ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "Process", "message": "Process: Running command '/usr/lib/nagios/plugins/check_ping' '-H' 'mysql.icinga.com' '-c' '5000,100%' '-w' '3000,80%': PID 8288"}
[2017-04-04 11:16:34 +0200] information/Notification: Sending 'Recovery' notification 'demo!load!mail-icingaadmin for user 'on-call' ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "Notification", "message": "Notification: Sending 'Recovery' notification 'demo!load!mail-icingaadmin for user 'on-call'"}
[2017-04-04 11:16:34 +0200] warning/PluginNotificationTask: Notification command for object 'demo!load' (PID: 19401, arguments: '/etc/icinga2/scripts/mail-service-notification.sh') terminated with exit code 127, output: /etc/icinga2/scripts/mail-service-notification.sh: 20: /etc/icinga2/scripts/mail-service-notification.sh: mail: not found ⇒ {"rule": "icinga", "level": "warn", "name": "PluginNotificationTask", "message": "PluginNotificationTask: Notification command for object 'demo!load' (PID: 19401, arguments: '/etc/icinga2/scripts/mail-service-notification.sh') terminated with exit code 127, output: /etc/icinga2/scripts/mail-service-notification.sh: 20: /etc/icinga2/scripts/mail-service-notification.sh: mail: not found"}
[2017-04-04 11:16:48 +0200] information/IdoMysqlConnection: Query queue items: 0, query rate: 5.38333/s (323/min 1610/5min 4778/15min); ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "IdoMysqlConnection", "message": "IdoMysqlConnection: Query queue items: 0, query rate: 5.38333/s (323/min 1610/5min 4778/15min);"}
information/cli: Icinga application loader (version: r2.6.3-1) ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "cli", "message": "cli: Icinga application loader (version: r2.6.3-1)"}
information/cli: Loading configuration file(s). ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "cli", "message": "cli: Loading configuration file(s)."}
# constructed [2026-10-21 14:03:01 +0000] critical/ApiListener: Cannot bind TCP socket for host '::' on port '5665'. ⇒ {"rule": "icinga", "level": "critical", "name": "ApiListener", "message": "ApiListener: Cannot bind TCP socket for host '::' on port '5665'."}
# constructed [2026-10-21 14:03:01 -0700] warning/CheckerComponent: Check command for object 'bench-1!pump' is not defined. ⇒ {"rule": "icinga", "level": "warn", "name": "CheckerComponent", "message": "CheckerComponent: Check command for object 'bench-1!pump' is not defined."}
# constructed [2026-10-21 14:03:01 +0200] notice/WorkQueue: #5 (ApiListener, SyncQueue) items: 0, rate: 0/s (0/min 0/5min 0/15min); ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "WorkQueue", "message": "WorkQueue: #5 (ApiListener, SyncQueue) items: 0, rate: 0/s (0/min 0/5min 0/15min);"}
# constructed [2026-10-21 14:03:01 +0200] debug/DbEvents: add log entry history for 'bench-1!pump' ⇒ {"rule": "icinga", "level": "debug", "name": "DbEvents", "message": "DbEvents: add log entry history for 'bench-1!pump'"}
# constructed critical/config: Error: Object 'bench-1' of type 'Host' re-defined ⇒ {"rule": "icinga", "level": "critical", "name": "config", "message": "config: Error: Object 'bench-1' of type 'Host' re-defined"}
# constructed warning/cli: Feature 'api' is already enabled. ⇒ {"rule": "icinga", "level": "warn", "name": "cli", "message": "cli: Feature 'api' is already enabled."}
# constructed information/ConfigItem: Committing config item(s). ⇒ {"rule": "icinga", "level": "info", "leveled": true, "name": "ConfigItem", "message": "ConfigItem: Committing config item(s)."}
# constructed debug/Checkable: Update checkable 'bench-1' with check interval '60' ⇒ {"rule": "icinga", "level": "debug", "name": "Checkable", "message": "Checkable: Update checkable 'bench-1' with check interval '60'"}
# a severity Icinga does not print, other punctuation, and other formats
# constructed [2026-10-21 14:03:01 +0200] info/cli: Icinga prints information ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] info/cli: Icinga prints information"}
# constructed [2026-10-21 14:03:01 +0200] error/cli: Icinga has no error severity ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] error/cli: Icinga has no error severity"}
# constructed [2026-10-21 14:03:01 +0200] Warning/cli: capitalized ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] Warning/cli: capitalized"}
# constructed [2026-10-21 14:03:01 +0200] warning/cli:no space ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] warning/cli:no space"}
# constructed [2026-10-21 14:03:01 +0200] warning cli: no slash ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] warning cli: no slash"}
# constructed [2026-10-21 14:03:01 +0200] warning/: no facility ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01 +0200] warning/: no facility"}
# constructed [2026-10-21 14:03:01] warning/cli: no zone ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[2026-10-21 14:03:01] warning/cli: no zone"}
# constructed warning/a b: a space in the facility ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "warning/a b: a space in the facility"}
# constructed debug: lower case and a colon is prose ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "debug: lower case and a colon is prose"}
/usr/bin/printf: write error: Broken pipe ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "/usr/bin/printf: write error: Broken pipe"}
[2017-08-04 10:48:20,377] INFO starting (kafka.server.KafkaServer) ⇒ {"rule": "kafka", "level": "info", "name": "kafka.server.KafkaServer", "message": "starting"}
