[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [hobbit] syntax for log monitoring with spaces?



In <81E66680B19401468995DC13C758F8661E46F4DFC4 (at) EXCMAIL01.gpipoc.com> Craig Cook <Craig.Cook (at) gpi.com> writes:

>   LOG /var/adm/messages %error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin COLOR=red IGNORE=%upload|External request already in progress|pam_dial_auth

Whitespace in the patterns is likely to trip up the parser. Wrap the 
pattern in quotes, or use [[:space:]] instead of space. (Or just '.',
which matches anything).

E.g.
	LOG /var/adm/messages \
		"%error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin" \
		"IGNORE=%upload|External request already in progress|pam_dial_auth" \
		COLOR=red


Regards,
Henrik