<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Phil,<br>
<br>
You need to put "" around entire IGNORE item - e.g.:<br>
<br>
... "IGNORE=%Client \([0-9]7"<br>
<br>
This applies for any use of regex in analysis.cfg which uses
spaces.<br>
<br>
David.<br>
</div>
<blockquote
cite="mid:5134DD74020000C0000CC92B@vho64pn04.orix.com.au"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Author" content="Novell GroupWise WebAccess">
<div>I'm having a problem with spaces in regular expressions when
trying to IGNORE log entries. So for the line:</div>
<br>
<div>
<div>
<pre>warning - 2013/03/04 12:52:21 - BigBrotherXymonClient (17) - The agent externals generated this event message : No externals have been specified</pre>
</div>
</div>
<div>
<div><font face="Tahoma, sans-serif"> works: LOG </font>eventlog_application %^warning
COLOR=red IGNORE=%Client.*17</div>
<div><font face="Tahoma, sans-serif"> works: LOG </font>eventlog_application %^warning
COLOR=red IGNORE=%Client.*[0-9]7</div>
<div><font face="Tahoma, sans-serif"> works: LOG </font>eventlog_application %^warning
COLOR=red IGNORE=Client\ \(17</div>
<div><font face="Tahoma, sans-serif"> works: LOG </font>eventlog_application %^warning
COLOR=red IGNORE=No\ externals\ have\ been\ specified<font
face="Tahoma, sans-serif"> </font></div>
<div><font face="Tahoma, sans-serif"><br>
</font></div>
<div><font face="Tahoma, sans-serif"> doesn't work: LOG </font>eventlog_application %^warning
COLOR=red IGNORE=%"Client \([0-9]7"</div>
<div><font face="Tahoma, sans-serif"> doesn't work: LOG </font>eventlog_application %^warning
COLOR=red IGNORE="Client \(17"</div>
<div><font face="Tahoma, sans-serif"> doesn't work: LOG </font>eventlog_application %^warning
COLOR=red IGNORE="Client (17"</div>
<div><font face="Tahoma, sans-serif"> doesn't work: LOG </font>eventlog_application %^warning
COLOR=red IGNORE="No externals have been specified"</div>
<div><font face="Tahoma, sans-serif"> </font></div>
</div>
<div>Is this correct? If so, why no spaces??? It is very confusing
as spaces are used elsewhere, eg I can have spaces in a DISK
name in analysis.cfg: DISK "/yada yada" 90 95, and spaces can be
used in various places in hosts.cfg.</div>
<br>
thanks, Phil
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Xymon mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Xymon@xymon.com">Xymon@xymon.com</a>
<a class="moz-txt-link-freetext" href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Information and Communication Technology Services
Australian Sports Commission <a class="moz-txt-link-freetext" href="http://ausport.gov.au">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617
</pre>
<br>
<hr>
Keep up to date with what's happening in Australian sport visit <a href="http://www.ausport.gov.au">www.ausport.gov.au</a>
<br><br>
<font size="-2" face="arial">This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.</font>
<hr>
</body>
</html>