Xymon Mailing List Archive search

log file monitoring issues

list Gary B.
Fri, 11 Aug 2006 13:37:28 -0400
Message-Id: <user-6d78854f329b@xymon.invalid>

Hmm.  Any ideas why the following wouldn't work?

log:/var/log/messages:10240
ignore upsd* Client|Connection 127.0.0.1
ignore session opened|closed for user mailman|root

The "full log" output is still showing those lines.  Could it be the
same reason I wasn't seeing any data at all on the other servers; that
is, the log file just hasn't been updated, and it's still showing
those from previous lines?  If so, is there a way I could tell Hobbit
to clear the existing data?

On 8/11/06, Henrik Stoerner <user-ce4a2c883f75@xymon.invalid> wrote:
On Fri, Aug 11, 2006 at 11:54:45AM -0400, Gary B. wrote:
Now if I can just get my "ignore" lines to work properly, I'll be all
set.  When using regular expressions on the "ignore" lines, do you
need to surround them as %"" like with regexes in hobbit-alerts.cfg
and such?
No, the strings in client-local.cfg are always treated as regular
expressions.


Regards,
Henrik