Re: [hobbit] Need help in getting message alerts

[Henrik Stoerner <henrik (at) hswn.dk>]

Have you configured your client(s) for server-side or client-side
configuration ? It's the first question asked when you configure
the client:
  Server side client configuration, or client side [server] ?

And what host are you editing the client-local.cfg and
hobbit-clients.cfg files on ? On the client or on the server?


Henrik


On Thu, Jan 10, 2008 at 02:15:24PM -0500, Edward Croft wrote:
> On the message page I am getting the following results.
> In the client-local.cfg file it says:
> log:/var/log/messages:10240
> trigger NOTICE
> trigger WARNING
> 
> log:/var/log/secure:10240
> ignore "Connection closed by"
> trigger BREAKIN
> 
> In hobbit-clients.cfg it says:
>         LOG /var/log/messages WARNING COLOR=yellow
>         LOG /var/log/messages NOTICE COLOR=red
>         LOG /var/log/secure BREAKIN
> 
> Yet, nothing appears in the top half and it never changes from green.
> 
> 
> No entries in /var/log/messages
> <http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>
> 
> No entries in /var/log/secure
> <http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>
> 
> 
> Full log /var/log/messages
> <http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>
> Jan 10 13:31:40 sirona ecroft: NOTICE
> 
> Full log /var/log/secure
> <http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>
> Jan 10 13:22:50 sirona sshd[5087]: Connection closed by 10.0.14.249
> Jan 10 13:27:51 sirona sshd[5133]: Connection closed by 10.0.14.249
> Jan 10 13:31:38 sirona ecroft: BREAKIN
> Jan 10 13:32:52 sirona sshd[5181]: Connection closed by 10.0.14.249
> Jan 10 13:37:53 sirona sshd[5227]: Connection closed by 10.0.14.249
> Jan 10 13:42:54 sirona sshd[5273]: Connection closed by 10.0.14.249
> Jan 10 13:47:55 sirona sshd[5319]: Connection closed by 10.0.14.249
> Jan 10 13:52:56 sirona sshd[5365]: Connection closed by 10.0.14.249
> 
> 
> 
> -- 
> If the sane say the insane are insane,
> What if the sane are insane?
> Would that make the insane sane?
> Explains a lot in Washington!
>  --E. Croft

-- 
Henrik Storner