[hobbit] syntax for log monitoring with spaces?
Henrik Størner
henrik at hswn.dk
Fri Dec 19 16:47:42 CET 2008
In <81E66680B19401468995DC13C758F8661E46F4DFC4 at EXCMAIL01.gpipoc.com> Craig Cook <Craig.Cook at gpi.com> writes:
> LOG /var/adm/messages %error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin COLOR=red IGNORE=%upload|External request already in progress|pam_dial_auth
Whitespace in the patterns is likely to trip up the parser. Wrap the
pattern in quotes, or use [[:space:]] instead of space. (Or just '.',
which matches anything).
E.g.
LOG /var/adm/messages \
"%error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin" \
"IGNORE=%upload|External request already in progress|pam_dial_auth" \
COLOR=red
Regards,
Henrik
More information about the Xymon
mailing list