problem with LOG and IGNORE in analysis.cfg

-----Original Message-----
From: Elizabeth Schwartz [mailto:user-c61747246f66@xymon.invalid]
Sent: Friday, August 12, 2011 2:56 PM
To: Lee, Raymond
Cc: xymon at xymon.com
Subject: Re: [Xymon] problem with LOG and IGNORE in analysis.cfg

I think your regular expressions are not right. Try runnign them
through pcretest.

               LOG /var/adm/messages %ERROR|WARNING COLOR=red

IGNORE=TEST

I think that should be %(ERROR|WARNING)

[Raymond Lee]

pcretest checks out fine:

        (xymon)@xymon:~$ pcretest
        PCRE version 7.8 2008-09-05

          re> /ERROR|WARNING/
        data> this is an ERROR
         0: ERROR
        data> this is a WARNING
         0: WARNING


And the man page for analysis.cfg has this example:


       Example: Trigger a yellow warning on all occurrences of the word "WARN‐
       ING"  or "NOTICE" in the "daemon.log" file, except those from the "lpr"
       system:
            LOG /var/log/daemon.log %WARNING|NOTICE COLOR=yellow IGNORE=lpr


This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.