[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xymon] Re: Ignoring strings in event logs
- To: "xymon (at) xymon.com" <xymon (at) xymon.com>
- Subject: Re: [xymon] Re: Ignoring strings in event logs
- From: Steve Holmes <sholmes42 (at) gmail.com>
- Date: Mon, 4 Oct 2010 20:48:29 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:references:from :content-type:x-mailer:in-reply-to:message-id:date:to :content-transfer-encoding:mime-version; bh=kdamNliWqVB+4XrMydh8uSyIiLtOf38tVkSmayIygRM=; b=l735xcMoEDmRlFy/h/qf1PWScWJ0SijARB8/AByi6ohfrzEiQenuAhtU5GM3BHod2M t0kI9vusOJpM5Llwb39BJg+oGVtXpFUk44eXSLx4P47JSCx9DlXnB20cnr/s8lmxPNWf Ry7VNeeMGrCDq3k843EnHrcQamWp6yuCCKU4o=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:references:from:content-type:x-mailer:in-reply-to :message-id:date:to:content-transfer-encoding:mime-version; b=Jz2AMeUbGT1XKwoiSlbyj4FvZ3G2OrBcXJkyob3ClWEb9D8x04r9XpuNZLTXdYI/+g snOW+HltjuwQFypzNjJA0AT6U9eiT8jhAthw4qYBhYDe5nS0C8EuxAQi7l2RhhMf0wK1 lEorBvDvsbqZXQJA+uu0eQsckgkFpKnbddbEw=
- References: <AANLkTinJ7SjO6P=gpCpRzO_AOHxdPdKd9X9pCs1uutpi (at) mail.gmail.com> <AANLkTinFzru5w3ra3RVLZTa5ajug92nnw-apvhXaCoze (at) mail.gmail.com>
Wherever you go, there you are.
On Oct 4, 2010, at 8:15 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
> Anyone have ideas on this?
>
> CC
>
> On Mon, Oct 4, 2010 at 12:43 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
>> Hi all
>>
>> I have the following in my hobbit-clients.cfg on the Xymon server
>> ---
>> CLASS=win32
>> LOAD 80 90 # Load threholds are in %
>> PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere
>> LOG %.* %error -.* COLOR=yellow
>> LOG eventlog:Security %failure.* COLOR=yellow
>> LOG eventlog:Application %warning.* COLOR=yellow
>> IGNORE="%(Warning: IIS log failed to write entry|Many client computers
>> have not reported back|Unsuccessful logon attempt from IP address .*
>> Secure (SSL) Connection).*"
>> LOG eventlog:System %error.* COLOR=yellow
>> ---
>>
>> I'm finding that I'm still getting warnings coming up from the WSUS
>> server regarding the clients that have not checked.
>>
>> Could someone advise what I'm doing wrong here?
>>
>> Thanks
>>
>> CC
>>
>> --
>> RHCE#805007969328369
>>
>
>
>
> --
> RHCE#805007969328369
>
> To unsubscribe from the xymon list, send an e-mail to
> xymon-unsubscribe (at) xymon.com
>
>
Oh, and you don't need the .* on the end of the string.
Steve