[Xymon] regular expressions in analysis.cfg

[Jeremy Laidman]

This works for me:

LOG /var/log/named/named.log "%(critical|general: error:)" COLOR=red
"IGNORE=%(zone serial unchanged)"

I think my use of parentheses is superfluous in this example.



On 4 March 2013 17:44, Phil Crooker <Phil.Crooker at orix.com.au> wrote:

> I'm having a problem with spaces in regular expressions when trying to
> IGNORE log entries. So for the line:
>
> warning - 2013/03/04 12:52:21 - BigBrotherXymonClient (17) - The agent externals generated this event message : No externals have been specified
>
>   works:           LOG eventlog_application %^warning   COLOR=red
> IGNORE=%Client.*17
>   works:           LOG eventlog_application %^warning   COLOR=red
> IGNORE=%Client.*[0-9]7
>   works:           LOG eventlog_application %^warning   COLOR=red
> IGNORE=Client\ \(17
>   works:           LOG eventlog_application %^warning   COLOR=red
> IGNORE=No\ externals\ have\ been\ specified
>
>   doesn't work:   LOG eventlog_application %^warning   COLOR=red
> IGNORE=%"Client \([0-9]7"
>   doesn't work:   LOG eventlog_application %^warning   COLOR=red
> IGNORE="Client \(17"
>   doesn't work:   LOG eventlog_application %^warning   COLOR=red
> IGNORE="Client (17"
>   doesn't work:   LOG eventlog_application %^warning   COLOR=red
> IGNORE="No externals have been specified"
>
> Is this correct? If so, why no spaces??? It is very confusing as spaces
> are used elsewhere, eg I can have spaces in a DISK name in analysis.cfg:
> DISK "/yada yada" 90 95, and spaces can be used in various places in
> hosts.cfg.
>
> thanks, Phil
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20130305/2b0e82cd/attachment.html>