<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word"><head><META content="text/html; charset=utf-8" http-equiv="Content-Type">
<STYLE><!-- /* Style Definitions */ p.b11e55ea-1129-46af-b80c-7e29bab17881, li.b11e55ea-1129-46af-b80c-7e29bab17881, div.b11e55ea-1129-46af-b80c-7e29bab17881, table.b11e55ea-1129-46af-b80c-7e29bab17881Table {margin:0cm; margin-bottom:.0001pt;} div.Section1 {page:Section1;} --> <!-- #b11e55ea-1129-46af-b80c-7e29bab17881excontact a{color:white;text-decoration:none;} #b11e55ea-1129-46af-b80c-7e29bab17881excontact a:hover{text-decoration:underline;} --></STYLE>
<META content="text/html; charset=utf-8" HTTP-EQUIV="Content-Type">
<meta content="Microsoft Word 11 (filtered medium)" name=Generator>
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head><BODY>
<div class=Section1>
<p class=MsoNormal><font color=navy face=Arial size=2><span style='font-size:
10.0pt;font-family:Arial;color:navy'>The single string I find catches the most
Linux log messages is “fail” . I have it set to scan for it no matter the
case. Other than that all the other strings are tied to particular
applications (backup software, Oracle, etc.).<o:p></o:p></span></font></p>
<p class=MsoNormal><font color=navy face=Arial size=2><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font color=navy face=Arial size=2><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hope that helps,<o:p></o:p></span></font></p>
<p class=MsoNormal><font color=navy face=Arial size=2><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Bruce<o:p></o:p></span></font></p>
<p class=MsoNormal><font color=navy face=Arial size=2><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div align=center class=MsoNormal style='text-align:center'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>
</span></font></div></div></div>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"> <FONT SIZE="+0"></FONT></P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"> <FONT FACE="Arial"><FONT SIZE="2"><FONT COLOR="#999999"><FONT COLOR="#000000"><STRONG>Bruce<FONT COLOR="#808080"><FONT COLOR="#000000"> White</FONT></FONT></STRONG></FONT></FONT></FONT></FONT></P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT FACE="Arial"><FONT SIZE="2"><FONT COLOR="#808080"> Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite@fellowes.com | <A HREF="http://www.fellowes.com/">www.fellowes.com</A></FONT></FONT></FONT></P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT FACE="Arial" SIZE="2"></FONT> </P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><IMG ALIGN="baseline" ALT="" BORDER="0" HSPACE="0" SRC="cid:fellbrand1.jpg@5632365d.115045db"> </P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT FACE="Arial" SIZE="2"></FONT> </P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT SIZE="+0"></FONT><STRONG></STRONG><FONT SIZE="+0"></FONT><FONT SIZE="+0"></FONT><FONT SIZE="+0"></FONT><FONT COLOR="#808080" FACE="Arial" SIZE="1">Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.</FONT></P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT FACE="Arial" SIZE="2"></FONT> </P>
<P CLASS="b11e55ea-1129-46af-b80c-7e29bab17881"><FONT FACE="Arial" SIZE="2"><div class=Section1><div><div align=center class=MsoNormal style='text-align:center'><font face="Times New Roman" size=3><span style='font-size:12.0pt'><hr align=center size=2 tabindex=-1 width="100%"></span></font></div></div></div><div class=Section1><div><div align=center class=MsoNormal style='text-align:center'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>
</span></font></div>
<p class=MsoNormal><b><font face=Tahoma size=2><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font face=Tahoma size=2><span style='font-size:10.0pt;font-family:Tahoma'>
xymon-bounces@xymon.com [mailto:xymon-bounces@xymon.com] <b><span style='font-weight:bold'>On Behalf Of </span></b>bb4@richter-it.net<br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, August 16, 2011
4:00 AM<br>
<b><span style='font-weight:bold'>To:</span></b> xymon@xymon.com<br>
<b><span style='font-weight:bold'>Subject:</span></b> [Xymon] Linux messages
monitoring - best practice</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font face="Times New Roman" size=3><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>Hi folks, <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'> <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>our company is switching from Solaris to Linux (Red
Hat). And now I'm curious what patterns do you have for system log file
monitoring since the messages and other files look slightly different from the
ones in Solaris. <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'> <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>Thanks <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font face="Times New Roman" size=3><span style='font-size:12.0pt'>Torsten <o:p></o:p></span></font></p>
</div>
</FONT></P></BODY></HTML>