<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I have this and it is good<br><br>CLASS=linux<br> PROC ntpd <br> PROC sshd 1 <br> PROC cron<br> FILE /var/log/messages red MODE=644<br> LOG /var/log/messages %panic|error|Critical<br> LOAD 25.0 35.0<br><br><br>except for the splunk server<br><br>on that ONE server I don't want above LOG to apply. <br><br>How can I do that?<br><br><br>Gonda<br><br><br><br><br><br><br> </div></body>
</html>