On Thu, Sep 13, 2007 at 04:49:46PM +0200, Dominique Frise wrote:
Henrik Stoerner wrote:
The DEFAULT section should ONLY be used to change the defaults for cpu-,
disk- and memory-thresholds. Do NOT use it for process- or
port-monitoring. Instead, you should use:
We use the DEFAULT section for common LOG rules.
[snip]
Is this really wrong?
It isn't really *wrong*, but it isn't *right* either ...
The thing is - it works, until you need to do something like what the
original poster wrote: Have the default rules applied to all hosts
except a few.
Regards,
Henrik