LOG test fails to IGNORE ?

Jerry Yu jjj863 at gmail.com
Thu Sep 28 23:01:40 CEST 2006


hi,
I have one single Hobbit server running 4.2RC1-20060712 on CentOS 4. Clients
have some harmless SELinux warning messages in /var/log/messages. I
configured Hobbit to ignore such lines (conf entries appended).
However, the LOG test still generates alerts. Below is excerpted from an
email alert. Any idea why? I brought up before 4.2 final version is
released, I believe, and was told it should not be the case.

&yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not relabel  with
user_u:object_r:devpts_t, not relabeling.

---cut---x------ hobbit-clients.cfg -----x-------cut-----
HOST=saturn
log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow IGNORE=relabeling
---cut---x------ clients-local.cfg -----x-------cut-----
[saturn]
log:/var/log/messages:10240
ignore MARK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20060928/f1e2cba9/attachment.html>


More information about the Xymon mailing list