user-9219fb9415b1@xymon.invalid wrote:
Hi
I have some difficulties to ignore some messages using the
hobbit-client.cfg file.
I want to ignore all messages that contain the word
"smb_proc_readdir_long".
So I build such rule:
HOST=s068a300
LOG %.* %(fatal|error) COLOR=red
IGNORE=smb_proc_readdir_long
LOG %.* warning COLOR=yellow
I also tried IGNORE=%smb...
If I write a message to /var/log/user like this:
logger -p daemon.notice Testmessage ERROR smb_proc_readdir_long
the message is not ignored by Hobbit:
System logs at Fri Sep 4 11:08:39 CEST 2009
Critical entries in /var/log/messages
.2009/09/04 11:03:53][s068a300:daemon.notice] root: Testmessage ERROR
smb_proc_readdir_long
.2009/09/04 11:03:53][s068a300:daemon.notice] root: Testmessage ERROR
smb_proc_readdir_long
Another question: if I have many IGNOREs, can I put them on multiple
lines for readability like this:
HOST=s068a300
LOG %.* %(fatal|error) COLOR=red
IGNORE=smb_proc_readdir_long
IGNORE=blabla
IGNORE=nonsense
LOG %.* warning COLOR=yellow
Thorsten Erdmann
If you are not the intended addressee, please inform us immediately
that you have received this e-mail in error, and delete it. We thank
you for your cooperation.
It's not obvious to me why it is not working. You might try to work
around the issue but using the "ignore" pattern in the client-local.cfg
configuration for the host or class, and not doing it in the
hobbit-clients config.
For the second, I do not believe multiple IGNORE keywords are accepted.
You can use a pattern match for this, like:
IGNORE=%(this thing|that thing)
Or, I think multiple "ignore" patterns (lines) /is/ allowed for a log
entry in client-local.
HTH.
-Alan