[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [hobbit] port rule evaluation in hobbit-clients.cfg
- To: hobbit (at) hswn.dk
- Subject: Re: [hobbit] port rule evaluation in hobbit-clients.cfg
- From: henrik (at) hswn.dk (Henrik Stoerner)
- Date: Thu, 13 Sep 2007 17:30:48 +0200
- References: <46E93908.8080504 (at) bc.edu> <20070913142222.GB25455 (at) hswn.dk> <46E94E0A.2000408 (at) unil.ch>
- User-agent: Mutt/1.5.13 (2006-08-11)
On Thu, Sep 13, 2007 at 04:49:46PM +0200, Dominique Frise wrote:
> Henrik Stoerner wrote:
> >The DEFAULT section should ONLY be used to change the defaults for cpu-,
> >disk- and memory-thresholds. Do NOT use it for process- or
> >port-monitoring. Instead, you should use:
>
> We use the DEFAULT section for common LOG rules.
[snip]
> Is this really wrong?
It isn't really *wrong*, but it isn't *right* either ...
The thing is - it works, until you need to do something like what the
original poster wrote: Have the default rules applied to all hosts
except a few.
Regards,
Henrik