[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xymon] Re: Ignoring strings in event logs
- To: "xymon (at) xymon.com" <xymon (at) xymon.com>
- Subject: Re: [xymon] Re: Ignoring strings in event logs
- From: Steve Holmes <sholmes42 (at) gmail.com>
- Date: Mon, 4 Oct 2010 20:47:08 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:references:from :content-type:x-mailer:in-reply-to:message-id:date:to :content-transfer-encoding:mime-version; bh=OfQt4WbkXb/DundvUfEeminuM0vOa2THn/ohvpaPv8g=; b=OJLAJWyAHfOQz63RY1Zh0EyAaVEz1QfvV0oDHLtrXDoYy+cReOWevWMiKzW14Dpx2Z intZ6mKuBvse3Pk8N7NxP+UnT/FAN4Wn57JvR3xRph7EwjU+ACxRHOJXuz5mBCIwzpmP eNOqeIdo4rCWvk53A+XqGIqGf6PYG+dCVCHMo=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:references:from:content-type:x-mailer:in-reply-to :message-id:date:to:content-transfer-encoding:mime-version; b=FZkFe2uyMJOSH3oTRd7GV8eGI6RUnzr1qBw3s0Is0CWE/pLDv+rZt+sSWrMZbebi39 FkoQh3rNMd8JCvP1CO1G9R7iXE4UN4z6wa9rJkU/ce8gW5CXIBCaluIr2B7oeQUQp1Uz WH9ai0TEixjxJ8oAwfFMTHLKVyYWVbCKFgHVk=
- References: <AANLkTinJ7SjO6P=gpCpRzO_AOHxdPdKd9X9pCs1uutpi (at) mail.gmail.com> <AANLkTinFzru5w3ra3RVLZTa5ajug92nnw-apvhXaCoze (at) mail.gmail.com>
Wherever you go, there you are.
On Oct 4, 2010, at 8:15 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
> Anyone have ideas on this?
>
> CC
>
> On Mon, Oct 4, 2010 at 12:43 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
>> Hi all
>>
>> I have the following in my hobbit-clients.cfg on the Xymon server
>> ---
>> CLASS=win32
>> LOAD 80 90 # Load threholds are in %
>> PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere
>> LOG %.* %error -.* COLOR=yellow
>> LOG eventlog:Security %failure.* COLOR=yellow
>> LOG eventlog:Application %warning.* COLOR=yellow
>> IGNORE="%(Warning: IIS log failed to write entry|Many client computers
>> have not reported back|Unsuccessful logon attempt from IP address .*
>> Secure (SSL) Connection).*"
>> LOG eventlog:System %error.* COLOR=yellow
>> ---
>>
>> I'm finding that I'm still getting warnings coming up from the WSUS
>> server regarding the clients that have not checked.
>>
>> Could someone advise what I'm doing wrong here?
>>
>> Thanks
>>
>> CC
>>
>> --
>> RHCE#805007969328369
>>
>
>
>
> --
> RHCE#805007969328369
>
> To unsubscribe from the xymon list, send an e-mail to
> xymon-unsubscribe (at) xymon.com
>
>
Try removing the double quotes and replacing each space with a \s (backslash-s). That is what seems to work best for me.
Steve