LOG test fails to IGNORE ?

list Olivier Boyaval
Fri, 29 Sep 2006 17:30:23 +0200
Message-Id: <user-cdfc39a567ce@xymon.invalid>

Jerry Yu a écrit :

any one ?

On 9/28/06, *Jerry Yu* <user-764c1f364fe0@xymon.invalid <mailto:user-764c1f364fe0@xymon.invalid>> 
wrote:

    hi,
    I have one single Hobbit server running 4.2RC1-20060712 on CentOS
    4. Clients have some harmless SELinux warning messages in
    /var/log/messages. I configured Hobbit to ignore such lines (conf
    entries appended).
    However, the LOG test still generates alerts. Below is excerpted
    from an email alert. Any idea why? I brought up before 4.2 final
    version is released, I believe, and was told it should not be the
    case.

    &yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not
    relabel  with user_u:object_r:devpts_t, not relabeling.

    ---cut---x------ hobbit-clients.cfg -----x-------cut-----
    HOST=saturn
    log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow
    IGNORE=relabeling
    ---cut---x------ clients-local.cfg -----x-------cut-----
    [saturn]
    log:/var/log/messages:10240
    ignore MARK

You can test :

log /var/log/messages %WARNING|NOTICE|ERROR yellow "IGNORE=relabeling"

and

ignore RELABELING

Cdl

Olivier