RE: [hobbit] Check log - ignore

["Pierre Ronnefalk" <pierre.ronnefalk (at) relacom.com>]

Either:
 
"
Try moving the IGNORE before the COLOR setting.
LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red
"
 
or this
 
"
Try this synthax :
LOG /var/adm/messages %WARNING yellow "IGNORE=AERR"
LOG /var/adm/messages %ERROR red "IGNORE=ARERR"
"

Works.....

/Pierre 

 

________________________________

From: Pierre Ronnefalk [mailto:pierre.ronnefalk (at) relacom.com] 
Sent: den 27 november 2006 11:03
To: hobbit (at) hswn.dk
Subject: [hobbit] Check log - ignore



Hi, 

I have the following check 

HOST=host01 
        LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR 
        LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR 

The problem is that ignore is not working. If i understand it right the
rows with the ignore text shoult not show up. 

I have also tried IGNORE=%ARERR, but sam result... 

/Pierre 


 [#######################   RELACOM CORPORATE EMAIL FOOTER
#######################]
  1. This communication is confidential and is only intended for use of
the 
     individual or entity to which it is directed. If you are not the
intended
     recipient of this email, please delete it without forwarding any of
its 
     contents. 
  2. Opinions and thoughts expressed in this email may be the personal
opinions 
     of the sender and do not necessarily represent the corporate values
of Relacom.
  3. For further information please visit:
http://security.relacom.com/email/ 
 
[#######################################################################
###########]