[Xymon] Regular expression

[Neil Simmonds]

Hi all,

 

I'm trying to monitor a Windows event log for an error,

 

I've got BBWin 0.12 installed in central mode and I've successfully got
the eventlogs showing up in messages,

 

However if I get an error from Backup Exec similar to this,

 

error - 2011/09/22 13:30:00 - Backup Exec System Recovery (100) - Error
EC8F17B7: Cannot create recovery points for job: BACKUP_SCHED_01_30_SAT.
Error E7B70001: Win32/Win64 API DeviceIoControl(IOCTL_VSNAP_VDIFF_STOP)
failed. Error EBAB03F1: The device does not recognize the command.
Details: 0xE7B70001 Source: Backup Exec System Recovery

 

Despite the fact that I have this, "LOG eventlog:Application %(Backup
Exec System Recovery\.+?|Error) COLOR=yellow" in my analysis.cfg file
the color doesn't change.

 

Using Regex builder, it appears that the regular expression should match
the string but it doesn't seem to be doing so. Has anyone any ideas?

 

Thanks,

Neil Simmonds 
Operations Analyst
Operations Support Group 
Express Gifts Ltd. 
neil.simmonds at express-gifts.co.uk 

Tel :- 01254 303092 
Fax :- 01254 303100 

 


Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151.
Express Gifts Limited is authorised and regulated by the Financial Services Authority
 -------------
NOTE:  This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records.  Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments.  No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20110922/54ec129e/attachment.html>