<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:x =
"urn:schemas-microsoft-com:office:excel" xmlns:p =
"urn:schemas-microsoft-com:office:powerpoint" xmlns:a =
"urn:schemas-microsoft-com:office:access" xmlns:dt =
"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s =
"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs =
"urn:schemas-microsoft-com:rowset" xmlns:z = "#RowsetSchema" xmlns:b =
"urn:schemas-microsoft-com:office:publisher" xmlns:ss =
"urn:schemas-microsoft-com:office:spreadsheet" xmlns:c =
"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc =
"urn:schemas-microsoft-com:office:odc" xmlns:oa =
"urn:schemas-microsoft-com:office:activation" xmlns:html =
"http://www.w3.org/TR/REC-html40" xmlns:q =
"http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc =
"http://microsoft.com/officenet/conferencing" XMLNS:D = "DAV:" XMLNS:Repl =
"http://schemas.microsoft.com/repl/" xmlns:mt =
"http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2 =
"http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda =
"http://www.passport.com/NameSpace.xsd" xmlns:ois =
"http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir =
"http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds =
"http://www.w3.org/2000/09/xmldsig#" xmlns:dsp =
"http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc =
"http://schemas.microsoft.com/data/udc" xmlns:xsd =
"http://www.w3.org/2001/XMLSchema" xmlns:sub =
"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec =
"http://www.w3.org/2001/04/xmlenc#" xmlns:sp =
"http://schemas.microsoft.com/sharepoint/" xmlns:sps =
"http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi =
"http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs =
"http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf =
"http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p =
"http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf =
"http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss =
"http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi =
"http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi =
"http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver =
"http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels =
"http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp =
"http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t =
"http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m =
"http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl =
"http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl =
"http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService"
XMLNS:Z = "urn:schemas-microsoft-com:" xmlns:st = ""><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18928"><!--[if !mso]>
<STYLE>v\:* {
BEHAVIOR: url(#default#VML)
}
o\:* {
BEHAVIOR: url(#default#VML)
}
w\:* {
BEHAVIOR: url(#default#VML)
}
.shape {
BEHAVIOR: url(#default#VML)
}
</STYLE>
<![endif]-->
<STYLE>@font-face {
font-family: Cambria Math;
}
@font-face {
font-family: Calibri;
}
@font-face {
font-family: Tahoma;
}
@page WordSection1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; }
P.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
LI.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
DIV.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; FONT-SIZE: 12pt
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
P {
FONT-FAMILY: "Times New Roman","serif"; MARGIN-LEFT: 0in; FONT-SIZE: 12pt; MARGIN-RIGHT: 0in; mso-style-priority: 99; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto
}
SPAN.EmailStyle18 {
FONT-FAMILY: "Calibri","sans-serif"; COLOR: #1f497d; mso-style-type: personal-reply
}
.MsoChpDefault {
mso-style-type: export-only
}
DIV.WordSection1 {
page: WordSection1
}
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=EN-US link=blue vLink=purple>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT color=#0000ff
size=2 face=Arial>You should not have the percentage % before the log file name
and don't use brackets...</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG
%/var/adm/messages IGNORE=%(ID 107833|corrupt label|wrong magic
number)</SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">should read
</SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG /var/adm/messages
IGNORE=%ID 107833|corrupt label|wrong magic
number</SPAN></SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=446411616-27082010><FONT size=2
face=Arial><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></SPAN></FONT></SPAN> </DIV>
<DIV> </DIV><!-- Converted from text/rtf format -->
<P><B><SPAN lang=en-ie><FONT color=#005a8c size=2 face=Arial>Padraig Lennon
</FONT></SPAN></B><BR><SPAN lang=en-ie><FONT color=#717274 size=2
face=Arial>Senior Systems Integration Engineer</FONT></SPAN> </P>
<P><SPAN lang=en-ie><B><FONT color=#005a8c size=2 face=Arial>Pioneer Investments
Management Ltd</FONT></B></SPAN> <BR><SPAN lang=en-ie><FONT color=#717274 size=2
face=Arial>5th Floor |Georges Quay Plaza | Georges Quay | Dublin 2 | Rep. of
Ireland</FONT></SPAN> <BR><B><SPAN lang=de><FONT color=#717274 size=2
face=Arial>Tel.</FONT></SPAN></B><SPAN lang=de><FONT color=#717274 size=2
face=Arial> +353 (0)1 480.2081 </FONT></SPAN></P>
<P><SPAN lang=de></SPAN><A
href="mailto:firstname.surname@pioneerinvestments.com"><SPAN lang=de><U><FONT
color=#0000ff size=2
face=Arial>padraig.lennon@pioneerinvestments.com</FONT></U></SPAN></A><SPAN
lang=de></SPAN><SPAN lang=en-ie><FONT color=#717274 size=2 face=Arial> |
</FONT></SPAN><A href="http://www.pioneerinvestments.com/"><SPAN
lang=en-ie><U><FONT color=#0000ff size=2
face=Arial>www.pioneerinvestments.com</FONT></U></SPAN></A><SPAN
lang=en-ie></SPAN> </P>
<P><SPAN lang=en-ie><FONT color=#9ea374 size=1 face=Arial>Please consider the
environment before printing this e-mail</FONT></SPAN> </P>
<DIV> </DIV><BR>
<DIV dir=ltr lang=en-us class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B> Kevin Kelly [mailto:kkelly@lifetouch.com]
<BR><B>Sent:</B> 27 August 2010 16:50<BR><B>To:</B>
xymon@xymon.com<BR><B>Subject:</B> RE: [xymon] ignore certain things in a log
file<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=WordSection1>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Having
no luck in ignoring the following messages from
/var/adm/messages<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:35 testserver Corrupt label; wrong magic
number<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver scsi: [ID 107833 kern.warning] WARNING:
/pci@7c0/pci@0/pci@9/SUNW,qlc@0/fp@0,0/ssd@w50060e8<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">005723700,0
(ssd3):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver Corrupt label; wrong magic number<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver scsi: [ID 107833 kern.warning] WARNING:
/pci@7c0/pci@0/pci@9/SUNW,qlc@0/fp@0,0/ssd@w50060e8<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">005723700,0
(ssd3):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver Corrupt label; wrong magic
number<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver scsi: [ID 107833 kern.warning] WARNING:
/pci@7c0/pci@0/pci@8/SUNW,qlc@0/fp@0,0/ssd@w50060e8<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">005723710,1
(ssd0):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver Corrupt label; wrong magic
number<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Aug
27 10:43:36 testserver scsi: [ID 107833 kern.warning] WARNING:
/pci@7c0/pci@0/pci@8/SUNW,qlc@0/fp@0,0/ssd@w50060e8<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">005723710,1
(ssd0):<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Have
I tried the following:<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG
%/var/adm/messages kern "IGNORE=%(corrupt label|wrong magic
number)”<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG
%/var/adm/messages %kern IGNORE=%(ID 107833|corrupt label|wrong magic
number)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG
%/var/adm/messages %kern IGNORE=%ID 107833|corrupt label|wrong magic
number<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">LOG
%/var/adm/messages IGNORE=%(ID 107833|corrupt label|wrong magic
number)<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Any
suggestions?<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><o:p> </o:p></SPAN></P>
<DIV
style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<P class=MsoNormal><B><SPAN
style="FONT-FAMILY: 'Tahoma','sans-serif'; FONT-SIZE: 10pt">From:</SPAN></B><SPAN
style="FONT-FAMILY: 'Tahoma','sans-serif'; FONT-SIZE: 10pt"> Matthew Moldvan
[mailto:mmoldvan@csc.com] <BR><B>Sent:</B> Thursday, August 26, 2010 11:06
AM<BR><B>To:</B> xymon@xymon.com<BR><B>Subject:</B> Re: [xymon] ignore certain
things in a log file<o:p></o:p></SPAN></P></DIV>
<P class=MsoNormal><o:p> </o:p></P>
<P style="MARGIN-BOTTOM: 12pt" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">I think (someone
correct me if I'm wrong) you might need the line to match to first, then what
you'd like to ignore afterward. Our ignore rules, which I believe work
(notice the double quotes, the ?i is case insensitive):</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">
LOG /var/adm/messages \</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">
%(?i)ERROR \</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">
"IGNORE=%(?i)(nres_gethostbyaddr|simple bind
failed - Invalid credentials|please upgrade FCSM|WARNING|NOTICE|fctl|FCSM|SRS
Proxy|xrx8825tlh2|ImportAcsError|AcsError|File \{.*\}, error 2|No such file or
directory|ViewMgr|Bad file format|Exec call for
FormTek|cache_trif_image|UserQry|DESKTOP_EDMOSRV.STARTUP|Error Level:
Informational|sshd.*Authentication failed
for|DESKTOP_EDMOSRV.STARTUP.*local0.error|httpd.*(modsecurity|password))"</SPAN>
<BR><BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">Spaces
are okay. For any rules you'd like to test, you can use the pcretool
command (available on my CentOS box, maybe not in your environment).
Syntax is as follows:</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">-bash-3.2$ pcretest
</SPAN><BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">PCRE
version 6.6 06-Feb-2006</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> re>
/(corrupt label|wrong magic number)/</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data>
corrupt</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">No match</SPAN>
<BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data>
corrupt label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> wrong magic
number</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: wrong magic
number</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: wrong magic
number</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">Or for a case
insensitive match:</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">-bash-3.2$ pcretest
</SPAN><BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">PCRE
version 6.6 06-Feb-2006</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> re>
/(?i)(corrupt label|wrong magic number)/</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> Corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: Corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: Corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: corrupt
label</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> asdf</SPAN>
<BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">No
match</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> WRONG MAGIC
NUMBER</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: WRONG MAGIC
NUMBER</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: WRONG MAGIC
NUMBER</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">data> wrong magic
number</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 0: wrong magic
number</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"> 1: wrong magic
number</SPAN> <BR><BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">Good luck, hope that
helps,</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">Matt.</SPAN>
<BR><BR><SPAN style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt">Unix
System Administrator<BR>Computer Science Corporation<BR>General Dynamics Land
Systems<BR><BR>This is a PRIVATE message. If you are not the intended recipient,
please delete without copying and kindly advise us by e-mail of the mistake in
delivery. <BR>NOTE: Regardless of content, this e-mail shall not operate to bind
CSC to any order or other contract unless pursuant to explicit written agreement
or government initiative expressly permitting the use of e-mail for such
purpose.</SPAN> <BR><BR><o:p></o:p></P>
<TABLE style="WIDTH: 100%" class=MsoNormalTable border=0 cellPadding=0
width="100%">
<TBODY>
<TR>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #5f5f5f; FONT-SIZE: 7.5pt">From:</SPAN>
<o:p></o:p></P></TD>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 7.5pt">"Kevin Kelly"
<kkelly@lifetouch.com></SPAN> <o:p></o:p></P></TD></TR>
<TR>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #5f5f5f; FONT-SIZE: 7.5pt">To:</SPAN>
<o:p></o:p></P></TD>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 7.5pt"><xymon@xymon.com></SPAN>
<o:p></o:p></P></TD></TR>
<TR>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #5f5f5f; FONT-SIZE: 7.5pt">Date:</SPAN>
<o:p></o:p></P></TD>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 7.5pt">08/26/2010
10:52 AM</SPAN> <o:p></o:p></P></TD></TR>
<TR>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: #5f5f5f; FONT-SIZE: 7.5pt">Subject:</SPAN>
<o:p></o:p></P></TD>
<TD
style="PADDING-BOTTOM: 0.75pt; PADDING-LEFT: 0.75pt; PADDING-RIGHT: 0.75pt; PADDING-TOP: 0.75pt"
vAlign=top>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 7.5pt">[xymon] ignore
certain things in a log file</SPAN><o:p></o:p></P></TD></TR></TBODY></TABLE>
<P class=MsoNormal><o:p> </o:p></P>
<DIV style="TEXT-ALIGN: center" class=MsoNormal align=center>
<HR style="COLOR: #a0a0a0" align=center SIZE=2 width="100%" noShade>
</DIV>
<P class=MsoNormal><BR><BR><BR><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Could somebody tell me why
this won’t work?</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"> </SPAN> <BR><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">HOST=testserver</SPAN>
<BR><SPAN style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">
LOG %/var/adm/messages kern "IGNORE=%(corrupt
label|wrong magic number)"</SPAN> <BR><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt"> </SPAN>
<BR><SPAN style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt">Trying to
ignore all lines in the messages file that contain those key words.</SPAN>
<BR><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt"> </SPAN>
<BR><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt">Thanks</SPAN>
<BR><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt"> </SPAN>
<BR><SPAN style="FONT-SIZE: 10pt">Kevin </SPAN><BR><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; FONT-SIZE: 10pt"> </SPAN>
<o:p></o:p></P>
<P><BR>______________________________________________________________________<BR>This
email has been scanned by the MessageLabs Email Security System.<BR>For more
information please visit <A
href="http://www.messagelabs.com/email">http://www.messagelabs.com/email</A>
<BR>_____________________________________________________________________<BR>This
is an e-mail from General Dynamics Land Systems. It is for the intended
recipient only and may contain confidential and privileged information. No one
else may read, print, store, copy, forward or act in reliance on it or its
attachments. If you are not the intended recipient, please return this message
to the sender and delete the message and any attachments from your computer.
Your cooperation is appreciated.
<o:p></o:p></P></DIV><BR>______________________________________________________________________<BR>This
email has been scanned by the MessageLabs Email Security System.<BR>For more
information please visit http://www.messagelabs.com/email
<BR>_____________________________________________________________________<BR></BODY></HTML>