hobbit-clients.cfg LOG configuration

[Geng Hu]

Hi,

In hobbit-clients.cfg LOG configuration, I want to catch critical event
lines, which
have the keyword  "EventID" and either keyword of failed, failure or error.
Looks this line doesn't work, any idea please?

  LOG  /var/log/messages %EventID.*(failed|failure|error)

thanks,

------
Geng
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20071030/587649f2/attachment.html>