[hobbit] Re: LOG test fails to IGNORE ?

[Jerry Yu]

The 'hobbit-clients.cfg' man page give this example:
LOG /var/log/daemon.log %WARNING|NOTICE COLOR=yellow IGNORE=lpr

This is identical to mine except the actual log file name and strings.


On 9/29/06, Olivier Boyaval <oboyaval at ch-bethune.fr> wrote:
>
> Jerry Yu a écrit :
> > any one ?
> >
> > On 9/28/06, *Jerry Yu* <jjj863 at gmail.com <mailto:jjj863 at gmail.com>>
> > wrote:
> >
> >     hi,
> >     I have one single Hobbit server running 4.2RC1-20060712 on CentOS
> >     4. Clients have some harmless SELinux warning messages in
> >     /var/log/messages. I configured Hobbit to ignore such lines (conf
> >     entries appended).
> >     However, the LOG test still generates alerts. Below is excerpted
> >     from an email alert. Any idea why? I brought up before 4.2 final
> >     version is released, I believe, and was told it should not be the
> >     case.
> >
> >     &yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not
> >     relabel  with user_u:object_r:devpts_t, not relabeling.
> >
> >     ---cut---x------ hobbit-clients.cfg -----x-------cut-----
> >     HOST=saturn
> >     log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow
> >     IGNORE=relabeling
> >     ---cut---x------ clients-local.cfg -----x-------cut-----
> >     [saturn]
> >     log:/var/log/messages:10240
> >     ignore MARK
> >
> >
> You can test :
>
> log /var/log/messages %WARNING|NOTICE|ERROR yellow "IGNORE=relabeling"
>
> and
>
> ignore RELABELING
>
> Cdl
>
> Olivier
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20060929/00bd339b/attachment.html>