"After picking out the "trigger" lines, any remaining space up to the
maximum size is filled in with the most recent entries from the logfile."
So it will include what you request as well as whatever else that will fit.
On Wed, 18 Sep 2019 at 09:32, Colin Coe <user-5b250cd7a540@xymon.invalid> wrote:
Hi all
I have this entry in client-local.cfg
---
[host=test_server_41]
log:/var/log/messages:1024000
ignore "%(Failed to fetch|Failed to parse|Failed to evaluate)"
trigger "%(ORA-04091|Failed to log off resource|Failed to log on resource)"
---
And in analysis.cfg I have:
---
HOST= test_server_41
LOG /var/log/messages %(ORA-04091|Failed to log off resource|Failed to
log on resource) IGNORE=OCS color=red
---
Needless to say I'm getting alerts for more than just "ORA-04091", "Failed
to log off resource", and "Failed to log on resource".
Any ideas what I'm doing wrong?
Thanks