BBWin and Hobbit msgs log question.

Robert,

If you are running in centralized mode, to get message log alerting you will also need something in client-local.cfg, such as:

[win32]
eventlog:application
ignore information
ignore BigBrotherHobbitClient
eventlog:system
ignore information

Then your LOG entry in hobbit-clients.cfg *should* work after restarting hobbit and bbwin, but you probably need/want to use regexes to refine the alerts.  For example, I use:

CLASS=win32
        LOG %application.* "%error - .*" COLOR=red
        LOG %application.* "%warning - .*" COLOR=yellow

Hope this helps.


Aaron Zink
Corporate IT Manager
eHarmony.com
XXX.XXX.XXXX


-----Original Message-----
From: McGraw, Robert P [mailto:user-33cf07af04dd@xymon.invalid]
Sent: Monday, June 16, 2008 07:09
To: user-cfc16496e024@xymon.invalid; user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] BBWin and Hobbit msgs log question.

HOBBIT SERVER: SunOS zorn.math.purdue.edu 5.10 Generic_120011-14 sun4u sparc
SUNW,Sun-Fire-280R runnint Hobbit 4.2

BBWIN CLIENT: Microsoft Windows Server 2003, Standard Edition Service Pack 2
(build 3790) running BBWin V.12

On the hobbit server I have the following event logs under msgs that are
coming from the BBWin server. I am not sure how I can monitor these log
messages.

Full log eventlog_application
information - 2008/06/16 09:52:34 - sshd (0) - The description for Event ID
( 0 ) in Source ( sshd ) cannot be found. The local computer may not have
the necessary registry information or message DLL files to display messages
from a remote computer. You may be able to use the /AUXSOURCE= flag to
retrieve this description; see Help and Support for details. The following
information is part of the event: sshd: PID 3320: Connection closed by
128.210.3.177.
information - 2008/06/16 09:47:33 - sshd (0) - The description for Event ID
( 0 ) in Source ( sshd ) cannot be found. The local computer may not have
the necessary registry information or message DLL files to display messages
from a remote computer. You may be able to use the /AUXSOURCE= flag to
retrieve this description; see Help and Support for details. The following
information is part of the event: sshd: PID 3524: Connection closed by
128.210.3.177.

What would I put in the hobbit server hobbit-clients.cfg file to make the
msgs icon for the bbwin client turn yellow.

I had tried

        LOG event_application information color=yellow

But that did not work.

Thanks

Robert


Robert P. McGraw, Jr.
Manager, Computer System                 EMAIL: user-33cf07af04dd@xymon.invalid
Purdue University                         ROOM: MATH-807
Department of Mathematics                PHONE: (XXX) XXX-XXXX
XXX N. University Street
West Lafayette, IN XXXXX-XXXX