RE: [hobbit] windows logs

[DKDeckert (at) Hormel.com]

I found you can use the client-local.cfg file....but im not really sure it
will work or not.  The man pages werent much help on this issue that is for
sure.

:(


                                                                                                                                    
  From:       <jef.jagers (at) thomsonreuters.com>                                                                                       
                                                                                                                                    
  To:         <hobbit (at) hswn.dk>                                                                                                      
                                                                                                                                    
  Date:       07/14/2009 08:32 AM                                                                                                   
                                                                                                                                    
  Subject:    RE: [hobbit] windows logs                                                                                             
                                                                                                                                    





The ignore you are using is meant for alerting purposses, not for ignoring
the logs itself.
I'm also looking for a solution for this matter. Haven't found one yet.

Currently the only option I see is to disable the event logs on the windows
server itself. But that's not really an option is it. :-)


Regards,
Jef Jagers
Systems Engineer
Thomson CompuMark

Thomson Reuters

T +32 3 220 76 02



-----Original Message-----
From: DKDeckert (at) Hormel.com [?mailto:DKDeckert (at) Hormel.com]
Sent: dinsdag, juli 14, 2009 15:19
To: hobbit (at) hswn.dk
Subject: [hobbit] windows logs


Hi everyone,

Does anyone monitor windows system logs?  When we installed the bbwin
client on the machine it started to just crazily send messages to xymon.
The harddrive for xymon went from 20% to 98% in one night.  I tried to
ignore logs but it still takes them in...

Its reading all the sucessful logins as well as the failures and logs them
so i get about 8 entries every second from all 189 hosts.

page=Wintel
        LOG %.*   %.*sucess.* IGNORE

this is what i tried to do to ignore them..


Has anyone ran into this issue before?

Thanks everyone...




Notice:
This communication is an electronic communication within the meaning of the
Electronic Communications Privacy Act, 18 U.S.C. § 2510.  Its disclosure is
strictly limited to the recipient(s) intended by the sender of this
message.  This transmission and any attachments may contain proprietary,
confidential, attorney-client privileged information and/or attorney work
product. If you are not the intended recipient, any disclosure, copying,
distribution, reliance on, or use of any of the information contained
herein is STRICTLY PROHIBITED.  Please destroy the original transmission
and its attachments without reading or saving in any matter and confirm by
return email.

To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe (at) hswn.dk







Notice:
This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. § 2510.  Its disclosure is strictly limited to the recipient(s) intended by the sender of this message.  This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED.  Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.