<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3354" name=GENERATOR></HEAD>
<BODY>
<DIV>
<P><SPAN class=027175112-15072008><FONT face=Arial size=2>Running Hobbit version
4.2.0 all-in-one </FONT><FONT face=Arial size=2>patch dated 2007-02-09
10:30 UTC.</FONT></SPAN></P>
<P><SPAN class=027175112-15072008><FONT face=Arial size=2>OS: Redhat AS
5</FONT></SPAN></P>
<P><SPAN class=027175112-15072008></SPAN><SPAN class=027175112-15072008>I have
searched thru the Hobbit Archive for ways to best pattern match in log
files. What I have is working to the extent of what I believe
hobbit will support "out of the box"</SPAN></P>
<P><SPAN class=027175112-15072008><FONT face=Arial size=2>1.) In Hobbit today
with version 4.2.0 log file alerts happen once in a 30 minute window even if you
have more than one occurrence. Has anyone been able to change this
behavior to a smaller window? "maybe 4.3.0 has something
new?" </FONT></SPAN></P>
<P><SPAN class=027175112-15072008><FONT face=Arial size=2>2.) Another feature
that I am looking for is</FONT> <FONT face=Arial size=2>thresholding. If I
throw 10 messages "that match" into a log in X time frame say 15
minutes or 30 minutes and so on I don't want to get notified but if I
throw 11 into the log I do. Is there any way to do this?</FONT></SPAN></P></DIV>
<DIV> </DIV>
<DIV align=left><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>