[hobbit] windows logs

[jef.jagers at thomsonreuters.com]

The ignore you are using is meant for alerting purposses, not for ignoring the logs itself.
I'm also looking for a solution for this matter. Haven't found one yet.

Currently the only option I see is to disable the event logs on the windows server itself. But that's not really an option is it. :-)


Regards, 
Jef Jagers
Systems Engineer
Thomson CompuMark

Thomson Reuters

T +32 3 220 76 02



-----Original Message-----
From: DKDeckert at Hormel.com [mailto:DKDeckert at Hormel.com] 
Sent: dinsdag, juli 14, 2009 15:19
To: hobbit at hswn.dk
Subject: [hobbit] windows logs


Hi everyone,

Does anyone monitor windows system logs?  When we installed the bbwin
client on the machine it started to just crazily send messages to xymon.
The harddrive for xymon went from 20% to 98% in one night.  I tried to
ignore logs but it still takes them in...

Its reading all the sucessful logins as well as the failures and logs them
so i get about 8 entries every second from all 189 hosts.

page=Wintel
        LOG %.*   %.*sucess.* IGNORE

this is what i tried to do to ignore them..


Has anyone ran into this issue before?

Thanks everyone...




Notice:
This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. § 2510.  Its disclosure is strictly limited to the recipient(s) intended by the sender of this message.  This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED.  Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.