[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Ignoring strings in event logs
- To: xymon (at) xymon.com
- Subject: Re: Ignoring strings in event logs
- From: Colin Coe <colin.coe (at) gmail.com>
- Date: Tue, 5 Oct 2010 08:15:28 +0800
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=AG4ekd5Q2Z0sD5rXdDSYxZcdVLvL2vcWHn6D0nAbojI=; b=nTK+K+JWWfUHERm6wBJzEZaBe4SA1yFy/nxwGdGpOFZZ36DC5iLyYqktQHqrdUqWZ0 kT6k0C2Chi9wSuHEDIHbYvQQ/3Fwd2wWZHrOokIsGPFDxiM8QlAd5kSd3g0lJFwANxem VCKgJbOe48W3ApfvtlERPDGNT/zo6k+RS/TR0=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=Bj9HIju+bzhAj0wTFRQmZp/Iv/u2yYvXW5bvCxH+4axNdwEa8lBNEBnrq0IVHpjCSb jUVGGk/RPiY7SLkftDqz+LMPCfZApKCNw8UNPLsMdzP/bOqU7I6UEgUQqKRDm+A9K6gh mAcbSIT/JBhYERaBrCndEUot9wFwhC2Z18SHo=
- References: <AANLkTinJ7SjO6P=gpCpRzO_AOHxdPdKd9X9pCs1uutpi (at) mail.gmail.com>
Anyone have ideas on this?
CC
On Mon, Oct 4, 2010 at 12:43 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
> Hi all
>
> I have the following in my hobbit-clients.cfg on the Xymon server
> ---
> CLASS=win32
> LOAD 80 90 # Load threholds are in %
> PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere
> LOG %.* %error -.* COLOR=yellow
> LOG eventlog:Security %failure.* COLOR=yellow
> LOG eventlog:Application %warning.* COLOR=yellow
> IGNORE="%(Warning: IIS log failed to write entry|Many client computers
> have not reported back|Unsuccessful logon attempt from IP address .*
> Secure (SSL) Connection).*"
> LOG eventlog:System %error.* COLOR=yellow
> ---
>
> I'm finding that I'm still getting warnings coming up from the WSUS
> server regarding the clients that have not checked.
>
> Could someone advise what I'm doing wrong here?
>
> Thanks
>
> CC
>
> --
> RHCE#805007969328369
>
--
RHCE#805007969328369