<div dir="ltr"><div>Still not working. </div>
<div> </div>
<div>
<div>My alert still turns red. Do you know if there is any other configuration in some other file that affects this behavior? I even tried a different string incase I was missing something in the first ignore string. My [win32] and [default] values are below my server definitions. Not sure where to go on this problem at this point. ~ Thank You for your help.</div>
</div>
<div> </div>
<div>I even tried to provied the same case as you:</div>
<div> </div>
<div>My client-local.cfg:<br><br>[stfwin6]<br>eventlog:System<br>ignore TermServDevices</div>
<div>ignore Printer Driver required<br><br>[win32]<br><br>My hobbit-clients.cfg:<br><br>HOST=stfwin6<br> LOG %.* %WARNING COLOR=yellow<br> LOG %.* %ERROR COLOR=yellow<br></div>
<div> </div>
<div><br><br> </div>
<div class="gmail_quote">On Thu, Aug 28, 2008 at 1:49 PM, Aaron Zink <span dir="ltr"><<a href="mailto:AaronZink@eharmony.com">AaronZink@eharmony.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">I could never get the ignore clause to work in for the event log either. Let me know if you have any luck!<br>
<br>I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops. I don't know if this applies to you.<br><br>My client-local.cfg looks like:<br>
<br>[win32]<br>eventlog:security<br>ignore .*success.*<br>eventlog:application<br>ignore BigBrotherHobbitClient<br>eventlog:eventlog_application<br>ignore BigBrotherHobbitClient<br>eventlog:system<br>ignore TermServDevices<br>
ignore information<br>file:C:\Program Files\BBWin\bin\BBWin.exe:md5<br><br>None of the ignore statements work.<br><font color="#888888"><br><br>Aaron Zink<br>Manager, Corporate IT<br>eHarmony.com<br>626.795.4814<br></font>
<div class="Ih2E3d"><br><br>-----Original Message-----<br>From: Chris Strzelczyk [mailto:<a href="mailto:chris4136@gmail.com">chris4136@gmail.com</a>]<br></div>
<div class="Ih2E3d">Sent: Thursday, August 28, 2008 09:17<br>To: <a href="mailto:hobbit@hswn.dk">hobbit@hswn.dk</a><br></div>
<div>
<div></div>
<div class="Wj3C7c">Subject: Re: [hobbit] configuration of bbwin clients in Hobbit<br><br>Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages. I searched the groups and can not find an answer that differs from my setup. Yet it does not work for me.<br>
<br>Also, does anyone have the CLASS=win32 feature to work. Currently I am filtering by hostnames, but I would like to filter by CLASS. I have the following in my files.<br><br>bb-hosts:<br>xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"<br>
<br>My client-local.cfg:<br><br>[stfwin6]<br>log:system<br>ignore TermServDevices<br><br>[win32]<br><br>My hobbit-clients.cfg:<br><br>HOST=stfwin6<br> LOG %.* %WARNING COLOR=yellow<br> LOG %.* %ERROR COLOR=yellow<br>
<br><br>In client-local.cfg I tried the log keyword as well as the eventlog keyword.<br><br>Thank You<br>-cs<br><br>On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <<a href="mailto:rmcgraw@purdue.edu">rmcgraw@purdue.edu</a>> wrote:<br>
<br><br> Anna,<br><br> I have not had good luck using class names so I have stayed with using host<br> name. Make sure that your hostname of the same class comes before the class<br> name. Ever which one it finds first that is the one it will use. So if you<br>
have an empty class name and a host name of the same class comes after the<br> class name nothing will happen.<br><br><br> So here is my client-local.cfg I have<br><br><br> [<a href="http://hostname.xxx.purdue.edu/" target="_blank">hostname.xxx.purdue.edu</a>]<br>
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt<br> eventlog:Application<br> ignore information<br> ignore success<br> ignore message could not be scanned<br> ignore Error occurred in Scanning<br>
eventlog:Security<br> ignore information<br> ignore success<br> ignore MAILRELAY Error Code: 0x0<br> eventlog:System<br> ignore information<br> ignore success<br><br> and my hobbit-client.cfg<br>
<br> HOST=<a href="http://hostname.xxx.purdue.edu/" target="_blank">hostname.xxx.purdue.edu</a><br> UP 30m 1w<br> LOAD 40.0 70.0<br> DISK * 90 95<br> FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800<br>
LOG %.* %WARNING COLOR=yellow<br> LOG %.* %ERROR COLOR=red<br> PROC AGDigestSvc.exe 1 1<br> PROC AgDomSvc.exe 1 1<br><br> In my use I have found that the epoch time is not calculated correctly. It<br>
seems that it will take the local time to calculate GMT and not adjust for<br> the time zone.<br><br> I have document this in the BBWIN mail list.<br><br> Hope this helps.<br><br> Robert<br>
<br><br><br><br> > -----Original Message-----<br> > From: Anna Jonna Armannsdottir [mailto:<a href="mailto:annaj@hi.is">annaj@hi.is</a>]<br> > Sent: Thursday, August 21, 2008 3:43 PM<br> > To: Hobbit user<br>
> Subject: [hobbit] configuration of bbwin clients in Hobbit<br> ><br> ><br> > I want to monitor the size of the logfiles on windows servers.<br> > I want to put a line in hobbit-clients.cfg like this:<br>
><br> > FILE /var/log/messages SIZE>0 MTIME<604800 yellow<br> ><br> > Does anybody have a clue about the name and paths of logfiles<br> > in Windows XP.<br> ><br>
> in client local i want to put this:<br> > [win32]<br> > log:/var/log/messages:10240<br> ><br> > Any clue, anybody?<br> ><br> > --<br> > Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people<br>
> read from top to bottom.<br> > Unix System Aministration, Computing Services, %& Q: Why is top<br> > posting bad?<br> > University of Iceland.<br> ><br> ><br>
> To unsubscribe from the hobbit list, send an e-mail to<br> > <a href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a><br> ><br> ><br><br><br><br><br><br><br>--<br>Chris Strzelczyk<br>
GCS Real Estate<br>Real Estate Investment and Management<br>(586) 770-9544<br>(248) 944-0506 (Business Hours Office Phone)<br><a href="mailto:chris@gcsrealestate.com">chris@gcsrealestate.com</a><br><br><br>To unsubscribe from the hobbit list, send an e-mail to<br>
<a href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a><br><br><br></div></div></blockquote></div><br><br clear="all"><br>-- <br>Chris Strzelczyk<br>GCS Real Estate<br>Real Estate Investment and Management<br>
(586) 770-9544<br>(248) 944-0506 (Business Hours Office Phone)<br><a href="mailto:chris@gcsrealestate.com">chris@gcsrealestate.com</a><br></div>