regular expressions in analysis.cfg

This works for me:

LOG /var/log/named/named.log "%(critical|general: error:)" COLOR=red
"IGNORE=%(zone serial unchanged)"

I think my use of parentheses is superfluous in this example.


On 4 March 2013 17:44, Phil Crooker <user-e8e31cd73303@xymon.invalid> wrote:

I'm having a problem with spaces in regular expressions when trying to
IGNORE log entries. So for the line:

warning - 2013/03/04 12:52:21 - BigBrotherXymonClient (17) - The agent externals generated this event message : No externals have been specified

  works:           LOG eventlog_application %^warning   COLOR=red
IGNORE=%Client.*17
  works:           LOG eventlog_application %^warning   COLOR=red
IGNORE=%Client.*[0-9]7
  works:           LOG eventlog_application %^warning   COLOR=red
IGNORE=Client\ \(17
  works:           LOG eventlog_application %^warning   COLOR=red
IGNORE=No\ externals\ have\ been\ specified

  doesn't work:   LOG eventlog_application %^warning   COLOR=red
IGNORE=%"Client \([0-9]7"
  doesn't work:   LOG eventlog_application %^warning   COLOR=red
IGNORE="Client \(17"
  doesn't work:   LOG eventlog_application %^warning   COLOR=red
IGNORE="Client (17"
  doesn't work:   LOG eventlog_application %^warning   COLOR=red
IGNORE="No externals have been specified"

Is this correct? If so, why no spaces??? It is very confusing as spaces
are used elsewhere, eg I can have spaces in a DISK name in analysis.cfg:
DISK "/yada yada" 90 95, and spaces can be used in various places in
hosts.cfg.

thanks, Phil