LOG alert not showing yellow

[Manocchia, Robert]

I have a small problem. I've set up monitoring of the /var/log/messages
logfile to search for the string "authentication failure" and alert with a
yellow button in the MSG column. I can see the error displayed when I click
on the button below the Msg column header but it does not turn yellow.

 

 

 Below is the entry in the clients-local.cfg file:

 

[batman]

log:/var/log/messages:10240

ignore MARK

 

This is the entry in the hobbit-clients.cfg file:

 

HOST=batman

        LOG     /var/log/messages       authentication failure  color=yellow

 

Why doesn't this give me a yellow alert.

 

 Thanks

 

Robert Manocchia

UNIX System Administrator

IDEXX Laboratories

207 556-6860

EMail Robert-Manocchia at idexx.com

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20070605/9b0974dd/attachment.html>