Found the solution. This works...
LOG %/var/(adm|log)/messages "%named.*?general.*?exiting" COLOR-=yellow
Found it in a 2009 Xymon archive after some serious digging. :)
Thanks!
On Thu, Sep 3, 2015 at 9:28 AM, David Welker <user-04cf53598626@xymon.invalid> wrote:
I have a problem with a named exiting occasionally. In an attempt to
alert myself when it happens, I placed the following in my analysis.cfg...
LOG %/var/(adm|log)/messages "%named%general%exiting" COLOR-=yellow
...yet when the following appeared...
[date.time] [host] named[9999]:daemon.notice<99>: general: exiting
..nothing happened. I even restarted xymon, waited for a new occurrence,
and it still didn't turn yellow.
Am I wildcarding correctly, or is there a better way to find this line?
Thanks,
David