[Xymon] problem with LOG and IGNORE in analysis.cfg

[Lee, Raymond]

> -----Original Message-----
> From: Elizabeth Schwartz [mailto:betsy.schwartz at gmail.com]
> Sent: Friday, August 12, 2011 2:56 PM
> To: Lee, Raymond
> Cc: xymon at xymon.com
> Subject: Re: [Xymon] problem with LOG and IGNORE in analysis.cfg
>
> I think your regular expressions are not right. Try runnign them
> through pcretest.
>
> >                LOG /var/adm/messages %ERROR|WARNING COLOR=red
> IGNORE=TEST
>
> I think that should be %(ERROR|WARNING)


[Raymond Lee]

pcretest checks out fine:

        (xymon)@xymon:~$ pcretest
        PCRE version 7.8 2008-09-05

          re> /ERROR|WARNING/
        data> this is an ERROR
         0: ERROR
        data> this is a WARNING
         0: WARNING


And the man page for analysis.cfg has this example:


       Example: Trigger a yellow warning on all occurrences of the word "WARN‐
       ING"  or "NOTICE" in the "daemon.log" file, except those from the "lpr"
       system:
            LOG /var/log/daemon.log %WARNING|NOTICE COLOR=yellow IGNORE=lpr




This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.