<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hey,<br>
</p>
<p><br>
</p>
<p>Just curious about how "ignore" and "trigger" work together in the clientlocal.cfg file. Let's say I have a log message like</p>
<p><br>
</p>
<p>2016-06-26 03:33:41 (myhost): [RED ALERT] File is missing<br>
</p>
<p><br>
</p>
<p>and rules in clientlocal such that<br>
</p>
<p><br>
</p>
<div>log:/var/log/some.log:10240</div>
<div>ignore "File is missing"</div>
<div>trigger "RED ALERT"<br>
</div>
<div><br>
</div>
<div>Which takes precedence? Is it just the order the rules are listed? <br>
</div>
<div><br>
</div>
<div>thanks<br>
</div>
<div><br>
</div>
<div>=G=<br>
</div>
<div><br>
</div>
<div><br>
</div>
<p><br>
</p>
</body>
</html>