[Xymon] [Possible Spam] Ignore all log messages

[Andy Smith]

Scot Kreienkamp wrote:
> Hi everyone,
> 
>  
> 
> Does anyone have any advice on messages logging?  I have a log for 
> postgres that gets so many lines written in a day there’s no way it can 
> transfer all of them to the Xymon server.  I don’t need any of that 
> traffic anyway.  The only lines I need are ones that contain a few 
> specific words.  So I put this in client-local.cfg:
> 
>  
> 
> [servername]
> 
> log:/var/log/postgres.log:10240
> 
> ignore .*
> 
> trigger 
> %(FATAL|Fatal|FAIL|Fail|fail|Error|ERROR|error|Error|timestamp|deadlock|Deadlock|password 
> authentication failed|pg_hba.conf|invalid magic number)
> 
> log:/var/log/messages:10240
> 
> ignore %(postgres|RMS Printing Subsystem|connection 
> received|disconnection|connection authorized)
> 
> trigger 
> %(FAIL|Fail|fail|Error|ERROR|error|Error|timestamp|deadlock|Deadlock|password 
> authentication failed|pg_hba.conf|invalid magic number)
> 
> file:/etc/passwd
> 
>
> However, that doesn’t seem to produce any log messages from the postgres 
> log even when it should match one of the triggers.  Client and server is 
> version 4.3.17. 
> 
>  
> 
> I appreciate any ideas anyone has, or if someone has already done this 
> if you could share your config I’d like to see how you did it.
> 
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon

You need ignore OR trigger, not both.  I find that logfetch crashes 
under certain circumstances if you use both, but in any case, they are 
functionally exclusive if you think about it.
-- 
Andy