Xymon Mailing List Archive search

Ignoring strings in event logs

list Colin Coe
Tue, 5 Oct 2010 08:15:28 +0800
Message-Id: <user-5494ec4e0b9e@xymon.invalid>

Anyone have ideas on this?

CC

On Mon, Oct 4, 2010 at 12:43 PM, Colin Coe <user-5b250cd7a540@xymon.invalid> wrote:
Hi all

I have the following in my hobbit-clients.cfg on the Xymon server
---
CLASS=win32
       LOAD 80 90 # Load threholds are in %
       PORT "LOCAL=%([.:]20000)$" TEXT=RemotelyAnywhere
       LOG %.*  %error -.* COLOR=yellow
       LOG eventlog:Security  %failure.* COLOR=yellow
       LOG eventlog:Application  %warning.* COLOR=yellow
IGNORE="%(Warning: IIS log failed to write entry|Many client computers
have not reported back|Unsuccessful logon attempt from IP address .*
Secure (SSL) Connection).*"
       LOG eventlog:System %error.* COLOR=yellow
---

I'm finding that I'm still getting warnings coming up from the WSUS
server regarding the clients that have not checked.

Could someone advise what I'm doing wrong here?

Thanks

CC

--
RHCE#805007969328369
-- 
RHCE#805007969328369