[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xymon] Re: Ignoring strings in event logs
- To: xymon (at) xymon.com
- Subject: Re: [xymon] Re: Ignoring strings in event logs
- From: Colin Coe <colin.coe (at) gmail.com>
- Date: Tue, 5 Oct 2010 11:33:04 +0800
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=4WuiuAzHzalMCvo5vmRA3m0oNWQ0tPcYZuKNsWioGsI=; b=ZxhMlcPEtib1SZxKLC4jc0mCLNpGm0Yd49YBJftZjfYLScJwc8oIM7+fTd68/WbnbO wSOcu0A9M6SoscWsPsqrscuVadS5ni8xWtOAA61KwHyV0P3oo0ZHbhwP0HESSMwjnWhQ RilVLIVynkHsxJ/fXrnFtNI04EvkHaziCRwDw=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=A464hJkIkJF0oXTzbr9v1r3mNugTkKz8qg78F+e6PArN+BsTNM5aMS5C+jqAedB+5k FWffdmXNzhH1yMAccxrdoEXa3WbG4xa1nHMZbrJATOUjV7qz+qLw0k/Db9lxdpx3eQGB MzkppeGDgPeaPYihd30C0ZvRMc7ORBL3ypFQ0=
- References: <AANLkTinJ7SjO6P=gpCpRzO_AOHxdPdKd9X9pCs1uutpi (at) mail.gmail.com> <AANLkTinFzru5w3ra3RVLZTa5ajug92nnw-apvhXaCoze (at) mail.gmail.com> <17C14BDB-C5F5-4C9E-87B9-03C946684E56 (at) gmail.com> <AANLkTi=RBLNwDXqykT2QVEdUqmM=7sxAEx2A3hsJPbk2 (at) mail.gmail.com> <AANLkTikp7U2qXQ7jAnmBb3y31De-70_GK57fuhD60Tqy (at) mail.gmail.com>
Hi Josh
After setting BBWin to be in central mode on a few test machines,
hobbitd_client crashes and does not restart.
CC
On Tue, Oct 5, 2010 at 11:00 AM, Josh Luthman
<josh (at) imaginenetworksllc.com> wrote:
> Are you sure your Windows clients are set for centralized configuration?
> They may be sending green/red instead of the data for the server to decide.
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
> On Mon, Oct 4, 2010 at 10:52 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
>>
>> On Tue, Oct 5, 2010 at 8:48 AM, Steve Holmes <sholmes42 (at) gmail.com> wrote:
>> >
>> >
>> > Wherever you go, there you are.
>> >
>> > On Oct 4, 2010, at 8:15 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
>> >
>> >> Anyone have ideas on this?
>> >>
>> >> CC
>> >>
>> >> On Mon, Oct 4, 2010 at 12:43 PM, Colin Coe <colin.coe (at) gmail.com> wrote:
>> >>> Hi all
>> >>>
>> >>> I have the following in my hobbit-clients.cfg on the Xymon server
>> >>> ---
>> >>> CLASS=win32
>> >>> LOAD 80 90 # Load threholds are in %
>> >>> PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere
>> >>> LOG %.* %error -.* COLOR=yellow
>> >>> LOG eventlog:Security %failure.* COLOR=yellow
>> >>> LOG eventlog:Application %warning.* COLOR=yellow
>> >>> IGNORE="%(Warning: IIS log failed to write entry|Many client computers
>> >>> have not reported back|Unsuccessful logon attempt from IP address .*
>> >>> Secure (SSL) Connection).*"
>> >>> LOG eventlog:System %error.* COLOR=yellow
>> >>> ---
>> >>>
>> >>> I'm finding that I'm still getting warnings coming up from the WSUS
>> >>> server regarding the clients that have not checked.
>> >>>
>> >>> Could someone advise what I'm doing wrong here?
>> >>>
>> >>> Thanks
>> >>>
>> >>> CC
>> >>>
>> >>
>> >> To unsubscribe from the xymon list, send an e-mail to
>> >> xymon-unsubscribe (at) xymon.com
>> >>
>> >>
>> >
>> > Oh, and you don't need the .* on the end of the string.
>> > Steve
>> >
>>
>> Hi Steve
>>
>> Thanks for the tips but unfortunately, these strings are still not
>> being ignored. I'm wondering if the problem is in 'client-local.cfg'.
>> At the top of 'hobbit-clients.cfg' it says that both files need to be
>> configured but I don't see an example for Windows event logs. How do
>> you have client-local.cfg configured for Windows logs?
>>
>> Thanks
>>
>> CC
>>
>> --
>> RHCE#805007969328369
>>
>> To unsubscribe from the xymon list, send an e-mail to
>> xymon-unsubscribe (at) xymon.com
>>
>>
>
>
--
RHCE#805007969328369