msgs - Multiple ignore patterns
list Sean Hennessey
Fri, 18 May 2007 13:37:26 -0400
Message-Id: <002801c79973$334028c0$user-3692d3b73f28@xymon.invalid>
I'd hazard a quess that what your regex is saying is
Plugin create statement from [userPassword or plugin] doing query. Try
putting () around the statements.
(Plugin create statement from userPassword)|(plugin doing query). Not sure
if you need to escape the ()'s or not.
Sean
-----Original Message-----
From: Giovanni - Gestor Redix [mailto:user-e1d5cb184a81@xymon.invalid] Sent: Friday, May 18, 2007 1:35 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] msgs - Multiple ignore patterns
Hi everyone,
I've applied the all-in-one patch but i still couldn't get multiple patterns to work in IGNORE parameter... Here is my configuration:
LOG /var/log/syslog "%password|error|fail|changed|tcpd|Accepted" COLOR=red IGNORE=%plugin create statement from userPassword|plugin doing query SELECT
LOG /var/log/auth.log "%password|error|fail|changed|tcpd|Accepted|jovial|tenebroso" COLOR=red IGNORE=%plugin create statement from userPassword|plugin doing query SELECT
Why this regex don't work ? Any idea ?
Thank you all the attention...
Cheers
--
Giovanni M. Frainer