LOG test fails to IGNORE ?

[Jerry Yu]

any one ?

On 9/28/06, Jerry Yu <jjj863 at gmail.com> wrote:
>
> hi,
> I have one single Hobbit server running 4.2RC1-20060712 on CentOS 4.
> Clients have some harmless SELinux warning messages in /var/log/messages. I
> configured Hobbit to ignore such lines (conf entries appended).
> However, the LOG test still generates alerts. Below is excerpted from an
> email alert. Any idea why? I brought up before 4.2 final version is
> released, I believe, and was told it should not be the case.
>
> &yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not relabel  with
> user_u:object_r:devpts_t, not relabeling.
>
> ---cut---x------ hobbit-clients.cfg -----x-------cut-----
> HOST=saturn
> log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow IGNORE=relabeling
> ---cut---x------ clients-local.cfg -----x-------cut-----
> [saturn]
> log:/var/log/messages:10240
> ignore MARK
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20060929/5ac3b220/attachment.html>