[hobbit] log file monitoring issues

[Gary B.]

Okay, the logs are showing up in the "Full log" section correctly now,
but my LOG keyword monitoring isn't working.

Ex)
[<server name>]
. . .
LOG     /var/log/maillog  did not issue MAIL/EXPN/VRFY/ETRN COLOR=yellow
. . .
LOG     /var/log/httpd/intranet/error_log client denied COLOR=yellow

Does "client denied" and "did not issue MAIL/EXPN/VRFY/ETRN" have to
be in quotes?

> > > Just ONE remaining issue now.  There are still additional log files I
> > > want to check for that aren't showing up.  I have this specific
> > > hosts's client-local.cfg entry defined as:
> > >
> > > [master.homeoffice.none]
> > > log:/var/log/samba/client.nmbd.log
> > > log:/var/log/messages:10240
> > > log:/var/log/maillog:10240
> > > ignore relay=localhost\.localdomain
> > > trigger denied
> > >
> > > The "messages" and "maillog" entries are showing up just fine, but the
> > > "client.nmbd.log" file is not showing up; not even with an empty "full
> > > log" section.  Any ideas?
> >
> > Check if the configuration data makes it to the client. Does this
> > data show up in the client's ~hobbit/client/tmp/logfetch.HOSTNAME.cfg
> > file ?
> >
> > If it does, then pick any status page from this host and click on the
> > "Client data" link near the bottom of the page. Look for the "[msgs:...]"
> > and "[logfile:...]" sections. Is there one for the client.nmbd.log file ?
>
> A thanks to Chris Morris for solving this issue.  I can't believe I
> missed it after staring that file for quite a while, but I was missing
> the :SIZE part.  Adding that fixed it, and now the additional logs are
> showing up.  I still have an issue with file permissions in OpenBSD,
> but at least now it's not a Hobbit-related issue.