[hobbit] Re: LOG test fails to IGNORE ?

[Olivier Boyaval]

Jerry Yu a écrit :
> any one ?
>
> On 9/28/06, *Jerry Yu* <jjj863 at gmail.com <mailto:jjj863 at gmail.com>> 
> wrote:
>
>     hi,
>     I have one single Hobbit server running 4.2RC1-20060712 on CentOS
>     4. Clients have some harmless SELinux warning messages in
>     /var/log/messages. I configured Hobbit to ignore such lines (conf
>     entries appended).
>     However, the LOG test still generates alerts. Below is excerpted
>     from an email alert. Any idea why? I brought up before 4.2 final
>     version is released, I believe, and was told it should not be the
>     case.
>
>     &yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not
>     relabel  with user_u:object_r:devpts_t, not relabeling.
>
>     ---cut---x------ hobbit-clients.cfg -----x-------cut-----
>     HOST=saturn
>     log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow
>     IGNORE=relabeling
>     ---cut---x------ clients-local.cfg -----x-------cut-----
>     [saturn]
>     log:/var/log/messages:10240
>     ignore MARK
>
>
You can test :

log /var/log/messages %WARNING|NOTICE|ERROR yellow "IGNORE=relabeling"

and

ignore RELABELING

Cdl

Olivier