[hobbit] linecount?????

[Joshua Krause]

Is there a way to alarm if the count of a particular word isn't  
there.  I am trying to monitor a log file that applies to a callerid  
program we use.  It will always be sending a phrase "SIP" and when  
that phrase isn't there then the application needs to be checked.  An  
I was hoping that the linecount would be able to help me.  Just  
couldn't find on anything on how to alarm on it.

Josh

On Oct 5, 2007, at 9:09 AM, Trent Melcher wrote:

> THis is from the man page
>
> COUNTING LOGENTRIES
> A special type of log-handling is possible, where the number of lines
> matching a regular expressions are merely counted. This is
> linecount:FILENAME, followed by a number of lines of the form
> ID:PATTERN. E.g.
>
>
>    linecount:/var/log/messages
>
>    diskerrors:I/O error.*device.*hd
>
>    badlogins:Failed login
>
>
>
>
> Looks like your format for the patterns you want to match isnt correct
>
> Trent
>
>
>
>
> On Fri, 2007-10-05 at 08:52 -0400, Joshua Krause wrote:
>> How do you enable it?  My client-local.cfg looks like this:
>>
>> [gsonc-spg-dncs]
>> file:/export/home/dncs/mystro/bfs/Compass_OOB/rta.grp.z
>> log:/dvs/dncs/tmp/bootpd.000:10240
>> trigger recvd
>> log:/var/adm/messages:10240
>> ignore MARK
>> ignore sendmail
>>
>> [gsonc-spg-mas-1]
>> file:/usr/local/mystro/logs/CallerId.log
>> log:/var/log/messages:10240
>> ignore MARK
>> linecount:/usr/local/mystro/logs/CallerId.log
>> callerid SIP
>>
>>
>> and my hobbit-client.cfg looks like this:
>>
>> HOST=%gsonc-spg-dncs
>> 	FILE	/export/home/dncs/mystro/bfs/Compass_OOB/rta.grp.z SIZE>1400
>> TRACK=rta
>> 	LOG	/dvs/dncs/tmp/bootpd.000 recvd COLOR=yellow
>> 	LOAD	10.0 15.0
>>
>> HOST=%gsonc-spg-mas-1
>> 	FILE	/usr/local/mystro/logs/CallerId.log TRACK=callerid
>> 	LOG	/usr/local/mystro/logs/CallerId.log TRACK=sip
>>
>> Am I doing this right or is this not right?
>>
>>
>> To unsubscribe from the hobbit list, send an e-mail to
>> hobbit-unsubscribe at hswn.dk
>>
>>
>
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
>