Problem with LOG test

Olivier Boyaval wrote:

David Gore a écrit :

Try this:

[agecanonix]
log:/var/log/messages:10240
trigger WARNING|ERROR
log:/home/sirt/log/alarm_tina.log:10240
trigger major|critical

I do not think '%' (pcre) is supported in this file.

I have tested with "trigger major|critical" and "trigger Major|Critical" and "trigger Critical" and "trigger critical"

that doesn't run :-(

Olivier

Login to the client host, agecanonix and look for these files:

cd ~/client/tmp && ls -al *status *cfg

Then you may want to try what you see in the .cfg by hand.  You should see something like this in the .cfg file:

log:/var/adm/messages:10240
trigger WARNING|ERROR
log:/home/sirt/log/alarm_tina.log:10240
trigger major|critical

Which should mirror your config.  Then try grepping by hand to see if you get what you want:

egrep -ei 'WARNING|ERROR' /var/adm/messages

And you are using Hobbit 4.2.0, if not then you need to upgrade.