Hello Thorsten,
I have had similar issues previously with Postgres errors. I found it
easier to have the log lines removed on the client side, saves the
logs from even reaching the xymon server.
This is going by memory as i am not in the office, but it should be
something like the following in the client-local.cfg ..
[sql0.my.net]
log:/var/log/messages:10240
ignore ntpd
Note, that this will strip out any lines with ntpd in it, so you may
miss other issues related to ntpd.
Hope this is a help
Darrin
2010/1/7 <user-9219fb9415b1@xymon.invalid>:
Hi
I have some problems filtering entries from the msg test. I have several
hosts, running SuSE which often produce the following messages in
/var/log/messages:
Jan 7 08:09:22 s068c320 ntpd[4944]: kernel time sync error 0001
The hosts are named s068c320, s068c321, s068c322, ...
So I made the following entries in the hobbit-clients.cfg on the
Hobbitserver, to filter out these messages:
HOST=%s068c32*
LOG %.* %(fatal|error) COLOR=red IGNORE=ntpd
It does not work. The messages come up as an error anyway.
Here is my whole hobbit-clients.cfg
HOST=s068310i
DISK %^/platform.* IGNORE
HOST=s068310b
DISK %^/platform.* IGNORE
HOST=s068a300
LOG %.* %(fatal|error) COLOR=red
IGNORE=%(smb_proc_readdir_long|peer)
LOG %.* warning COLOR=yellow
# DISK * 10 15
HOST=s068c327
DISK /mnt IGNORE
HOST=%s068c32*
LOG %.* %(fatal|error) COLOR=red IGNORE=ntpd
HOST=s068c320,s068c321,s068c322
PROC "lmgrd -c" 1 1
PROC "pam_lmd" 1 1
DEFAULT
# These are the built-in defaults.
UP 1h
LOAD 5.0 10.0
DISK * 90 95
DISK /media/cdrom 101 101
MEMPHYS 100 101
MEMSWAP 50 80
MEMACT 90 97
LOG %.* %(fatal|error) COLOR=red
IGNORE=%(read_socket_data|peer)
LOG %.* warning COLOR=yellow
What's wrong there?
BTW: the smb_proc_readdir_log filter also does not work.
Thank you
Thorsten Erdmann
If you are not the intended addressee, please inform us immediately that you
have received this e-mail in error, and delete it. We thank you for your
cooperation.
--
Darrin Khan
user-8737e9cc15a9@xymon.invalid
Ted Turner - "Sports is like a war without the killing." -
http://www.brainyquote.com/quotes/authors/t/ted_turner.html