Xymon Mailing List Archive search

class= in analysis.cfg

3 messages in this thread

list Kevin King · Tue, 25 Mar 2014 14:57:32 +0000 · 
I am using the CLASS= option in the client-local.cfg and in analysis.cfg.

The file options from client cfg get pushed to the client ok and proper logs are collected.
When I work with the analysis.cfg file it is not triggering on the keywords and color for the log files.
I use the Xymon_client -test and this works my rules properly trigger on the test keywords.

I am using 4.3.10 on server and 4.3.12 on client.

I am preparing to upgrade server and client to 4.3.17. I see in the notes that .14 to .16 had some work in this area.

So is it me or is the upgrade my solution?

Kevin H. King
Implementations
"You can not please everyone everyday, But everyday please everyone you can" -me
list Jeremy Laidman · Mon, 31 Mar 2014 12:19:22 +1100 ·
▸ quoted from Kevin King
On 26 March 2014 01:57, KING, KEVIN <user-ca972c0c43a8@xymon.invalid> wrote:

 I am using the CLASS= option in the client-local.cfg and in analysis.cfg.


The file options from client cfg get pushed to the client ok and proper
logs are collected.

When I work with the analysis.cfg file it is not triggering on the
keywords and color for the log files.

I use the Xymon_client -test and this works my rules properly trigger on
the test keywords.

Can you show the relevant lines in analysis.cfg?
▸ quoted from Kevin King

I am preparing to upgrade server and client to 4.3.17. I see in the notes
that .14 to .16 had some work in this area.


So is it me or is the upgrade my solution?

I couldn't say.

J
list Kevin King · Mon, 31 Mar 2014 19:10:22 +0000 · 
Can you show the relevant lines in analysis.cfg?


CLASS=DIH
        PROC syscheck 1 2 red
        DISK /var/TKLC/ixp 95 99
        DISK %^/pdu_. 95 99
        LOG /var/log/messages ERROR
        LOG /var/log/messages %abnormally|ALERT|WARNING|NOTICE|failed COLOR=yellow
        LOG /var/TKLC/log/syscheck/fail_log FAILURE
        LOG /var/log/secure FAIL COLOR=yellow