RE: [hobbit] configuration of bbwin clients in Hobbit

[Aaron Zink <AaronZink (at) eharmony.com>]

I could never get the ignore clause to work in for the event log either.  Let me know if you have any luck!

I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops.  I don't know if this applies to you.

My client-local.cfg looks like:

[win32]
eventlog:security
ignore .*success.*
eventlog:application
ignore BigBrotherHobbitClient
eventlog:eventlog_application
ignore BigBrotherHobbitClient
eventlog:system
ignore TermServDevices
ignore information
file:C:\Program Files\BBWin\bin\BBWin.exe:md5

None of the ignore statements work.


Aaron Zink
Manager, Corporate IT
eHarmony.com
626.795.4814


-----Original Message-----
From: Chris Strzelczyk [mailto:chris4136 (at) gmail.com]
Sent: Thursday, August 28, 2008 09:17
To: hobbit (at) hswn.dk
Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages.  I searched the groups and can not find an answer that differs from my setup.  Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work.  Currently I am filtering by hostnames, but I would like to filter by CLASS.  I have the following in my files.

bb-hosts:
xxx.xxx.xxx.xxx   stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6]
log:system
ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
        LOG %.* %WARNING  COLOR=yellow
        LOG %.* %ERROR  COLOR=yellow


In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You
-cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <rmcgraw (at) purdue.edu> wrote:


        Anna,

        I have not had good luck using class names so I have stayed with using host
        name. Make sure that your hostname of the same class comes before the class
        name. Ever which one it finds first that is the one it will use. So if you
        have an empty class name and a host name of the same class comes after the
        class name nothing will happen.


        So here is my client-local.cfg I have


        [hostname.xxx.purdue.edu]
        file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
        eventlog:Application
        ignore information
        ignore success
        ignore message could not be scanned
        ignore Error occurred in Scanning
        eventlog:Security
        ignore information
        ignore success
        ignore MAILRELAY Error Code: 0x0
        eventlog:System
        ignore information
        ignore success

        and my hobbit-client.cfg

        HOST=hostname.xxx.purdue.edu
           UP 30m 1w
           LOAD 40.0 70.0
           DISK * 90 95
           FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
           LOG %.* %WARNING  COLOR=yellow
           LOG %.* %ERROR  COLOR=red
           PROC AGDigestSvc.exe  1 1
           PROC AgDomSvc.exe  1 1

        In my use I have found that the epoch time is not calculated correctly. It
        seems that it will take the local time to calculate GMT and not adjust for
        the time zone.

        I have document this in the BBWIN mail list.

        Hope this helps.

        Robert




        > -----Original Message-----
        > From: Anna Jonna Armannsdottir [mailto:annaj (at) hi.is]
        > Sent: Thursday, August 21, 2008 3:43 PM
        > To: Hobbit user
        > Subject: [hobbit] configuration of bbwin clients in Hobbit
        >
        >
        > I want to monitor the size of the logfiles on windows servers.
        > I want to put a line in hobbit-clients.cfg like this:
        >
        > FILE /var/log/messages SIZE>0 MTIME<604800 yellow
        >
        > Does anybody have a clue about the name and paths of logfiles
        > in Windows XP.
        >
        > in client local i want to put this:
        > [win32]
        > log:/var/log/messages:10240
        >
        > Any clue, anybody?
        >
        > --
        > Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people
        > read from top to bottom.
        > Unix System Aministration, Computing Services,   %&   Q: Why is top
        > posting bad?
        > University of Iceland.
        >
        >
        > To unsubscribe from the hobbit list, send an e-mail to
        > hobbit-unsubscribe (at) hswn.dk
        >
        >






--
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(586) 770-9544
(248) 944-0506 (Business Hours Office Phone)
chris (at) gcsrealestate.com