In <user-c5293afdde49@xymon.invalid> Craig Cook <user-bd346ac7bd4a@xymon.invalid> writes:
LOG /var/adm/messages %error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin COLOR=red IGNORE=%upload|External request already in progress|pam_dial_auth
Whitespace in the patterns is likely to trip up the parser. Wrap the
pattern in quotes, or use [[:space:]] instead of space. (Or just '.',
which matches anything).
E.g.
LOG /var/adm/messages \
"%error|panic|ERROR|half-duplex|failing|transport failed|responding|core|NOTICE|offlin" \
"IGNORE=%upload|External request already in progress|pam_dial_auth" \
COLOR=red
Regards,
Henrik