RE: [hobbit] LOG alert not showing yellow

["Manocchia, Robert" <Robert-Manocchia (at) IDEXX.com>]

The /var/log/messages file has rw-r-r-- access rights so the hobbit user can
read the file.

 

Robert Manocchia

UNIX System Administrator

IDEXX Laboratories

207 556-6860

EMail Robert-Manocchia (at) idexx.com

-----Original Message-----
From: Sello Tlabela (SD) [mailto:TlabelSD (at) telkom.co.za] 
Sent: Wednesday, June 06, 2007 1:37 AM
To: hobbit (at) hswn.dk
Subject: RE: [hobbit] LOG alert not showing yellow

 

Hi Manocchia,

 

It could be access rights, if you are running hobbit using the init script
it will run as user hobbit and make sure that hobbit user can read
/var/log/messages

 

Regards

 

Sello Tlabela

 

  _____  

From: Manocchia, Robert [mailto:Robert-Manocchia (at) IDEXX.com] 
Sent: 05 June 2007 21:38
To: 'hobbit (at) hswn.dk'
Subject: [hobbit] LOG alert not showing yellow

 

I have a small problem. I've set up monitoring of the /var/log/messages
logfile to search for the string "authentication failure" and alert with a
yellow button in the MSG column. I can see the error displayed when I click
on the button below the Msg column header but it does not turn yellow.

 

 

 Below is the entry in the clients-local.cfg file:

 

[batman]

log:/var/log/messages:10240

ignore MARK

 

This is the entry in the hobbit-clients.cfg file:

 

HOST=batman

        LOG     /var/log/messages       authentication failure  color=yellow

 

Why doesn't this give me a yellow alert.

 

 Thanks

 

Robert Manocchia

UNIX System Administrator

IDEXX Laboratories

207 556-6860

EMail Robert-Manocchia (at) idexx.com

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail and its contents are subject to the Telkom SA Limited
e-mail legal notice available at 
http://www.telkom.co.za/TelkomEMailLegalNotice.PDF
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~