[Xymon] client-local.cfg ignore a complicated line - syntax issue?

Betsy Schwartz betsy.schwartz at gmail.com
Fri Sep 12 05:00:24 CEST 2014


I'm probably missing something obvious here, but I'm getting stuck
I'm looking at a logfile and I would like to ignore lines like this:

Sep 11 22:24:36 10.65.0.6 apcontroller: *bcastReceiveTask: Sep 11
22:24:36.407: %DTL-4-ARP_ORPHANPKT_DETECTED: dtl_net.c:1426 STA(Target
MAC Address) [d4:9a:20:58:46:34, 0.0.0.0] ARP (op ARP REQUEST)
received with invalid SPA(Source IP Address)
10.0.10.157/TPA(Destination IP Address) 10.0.10.1


I've been playing around with variations like
log:/appdata/logserver/local7.log:102400 IGNORE
(apcontroller|cli.WARNING|cli.NOTICE)
or
log:/appdata/logserver/local7.log:102400 IGNORE
apcontroller|cli.WARNING|cli.NOTICE
or
log:/appdata/logserver/local7.log:102400 IGNORE=
(apcontroller|cli.WARNING|cli.NOTICE)
or
log:/appdata/logserver/local7.log:102400
IGNORE=%(?-i)apcontroller|cli.WARNING|cli.NOTICE

and even
log:/appdata/logserver/local7.log:102400 IGNORE apcontroller

(I'd like to ignore the cli.WARNING and cli.NOTICE too, but there are
really too many apcontroller lines)

Please, what is the syntax I need for this? Or is this a problem because
it's a complicated line containing so many special sorts of characters?

thanks Betsy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20140911/44ad3a3f/attachment.html>


More information about the Xymon mailing list