Zabbix using find for log monitoring?

Question

Zabbix

Good afternoon, now I have a working trigger find (/ debianZabbix / log [/var/log/auth.log] ,, "like", "FAILED LOGIN") = 1 (monitors the log on the client for authorization errors from the console).
I want to add monitoring of connection errors via SSH to the trigger.
Changed the expression to find (/ debianZabbix / log [/var/log/auth.log] ,, "like", "FAILED LOGIN") = 1 or find (/ debianZabbix / log [/var/log/auth.log] . (find(/debianZabbix/log[/var/log/auth.log] ,, "like", "Failed") = 1) no.
Tell me what's wrong?

Answer 1

The solution solved the problem https://www.zabbix.com/forum/in-russian/433663-%D0...