Check log - ignore

4 messages in this thread

list Pierre Ronnefalk · Mon, 27 Nov 2006 11:03:18 +0100 ·

Hi,

I have the following check

HOST=host01
        LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR
        LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR

The problem is that ignore is not working. If i understand it right the
rows with the ignore text shoult not show up.

I have also tried IGNORE=%ARERR, but sam result...

/Pierre


 [#######################   RELACOM CORPORATE EMAIL FOOTER   #######################]
  1. This communication is confidential and is only intended for use of the      individual or entity to which it is directed. If you are not the intended
     recipient of this email, please delete it without forwarding any of its      contents.   2. Opinions and thoughts expressed in this email may be the personal opinions      of the sender and do not necessarily represent the corporate values of Relacom.
  3. For further information please visit: http://security.relacom.com/email/  [##################################################################################]

list Henrik Størner · Mon, 27 Nov 2006 13:51:57 +0100 ·

▸ quoted from Pierre Ronnefalk

On Mon, Nov 27, 2006 at 11:03:18AM +0100, Pierre Ronnefalk wrote:

Hi,

I have the following check

HOST=host01
        LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR
        LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR

Try moving the IGNORE before the COLOR setting.

  LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red

(both should work, but I'm not sure they do).


Regards,
Henrik

list Olivier Boyaval · Mon, 27 Nov 2006 13:52:52 +0100 ·

▸ quoted from Pierre Ronnefalk

Pierre Ronnefalk a écrit :

Hi,

I have the following check

HOST=host01
LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR
LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR

The problem is that ignore is not working. If i understand it right 
the rows with the ignore text shoult not show up.

I have also tried IGNORE=%ARERR, but sam result…

/Pierre

Try this synthax :
LOG /var/adm/messages %WARNING yellow "IGNORE=AERR"
LOG /var/adm/messages %ERROR red "IGNORE=ARERR"

Cdl

Olivier

list Pierre Ronnefalk · Tue, 28 Nov 2006 09:31:54 +0100 ·

Either:

▸ quoted from Henrik Størner

 "
Try moving the IGNORE before the COLOR setting.
LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red
"


 or this

▸ quoted from Olivier Boyaval

 "
Try this synthax :
LOG /var/adm/messages %WARNING yellow "IGNORE=AERR"
LOG /var/adm/messages %ERROR red "IGNORE=ARERR"
"


Works.....

/Pierre

▸ quoted from Pierre Ronnefalk

 

From: Pierre Ronnefalk [mailto:user-81e722f5bb90@xymon.invalid] Sent: den 27 november 2006 11:03
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Check log - ignore


Hi, 
I have the following check 
HOST=host01         LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR         LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR 
The problem is that ignore is not working. If i understand it right the
rows with the ignore text shoult not show up. 
I have also tried IGNORE=%ARERR, but sam result... 
/Pierre 

 [#######################   RELACOM CORPORATE EMAIL FOOTER
#######################]
  1. This communication is confidential and is only intended for use of
the      individual or entity to which it is directed. If you are not the
intended
     recipient of this email, please delete it without forwarding any of
its      contents.   2. Opinions and thoughts expressed in this email may be the personal
opinions      of the sender and do not necessarily represent the corporate values
of Relacom.
  3. For further information please visit:
http://security.relacom.com/email/  [#######################################################################
###########]

Check log - ignore 🔗 link

Check log - ignore