[hobbit] syntax for log monitoring with spaces?

Henrik Størner henrik at hswn.dk
Fri Dec 19 16:47:42 CET 2008


In <81E66680B19401468995DC13C758F8661E46F4DFC4 at EXCMAIL01.gpipoc.com> Craig Cook <Craig.Cook at gpi.com> writes:

>   LOG /var/adm/messages %error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin COLOR=red IGNORE=%upload|External request already in progress|pam_dial_auth

Whitespace in the patterns is likely to trip up the parser. Wrap the 
pattern in quotes, or use [[:space:]] instead of space. (Or just '.',
which matches anything).

E.g.
	LOG /var/adm/messages \
		"%error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin" \
		"IGNORE=%upload|External request already in progress|pam_dial_auth" \
		COLOR=red


Regards,
Henrik




More information about the Xymon mailing list