[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [hobbit] hobbit-clients.cfg LOG configuration
- To: hobbit (at) hswn.dk
- Subject: Re: [hobbit] hobbit-clients.cfg LOG configuration
- From: Henrik Stoerner <henrik (at) hswn.dk>
- Date: Tue, 30 Oct 2007 12:45:18 +0100
- References: <9e070a950710300217x9b0f10bp827a2d8c45a9b5e4 (at) mail.gmail.com>
- User-agent: Mutt/1.5.15+20070412 (2007-04-11)
On Tue, Oct 30, 2007 at 05:17:10PM +0800, Geng Hu wrote:
> In hobbit-clients.cfg LOG configuration, I want to catch critical event
> lines, which
> have the keyword "EventID" and either keyword of failed, failure or error.
> Looks this line doesn't work, any idea please?
>
> LOG /var/log/messages %EventID.*(failed|failure|error)
It would help if you could show us some of the actual lines from the
logfile that you would expect this to catch.
Henrik