Hello,
I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in
/var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is
as follows:
HOST=%cn4[3-6]*-hp
PROC "%syslogd" 1 1 red
PROC "%/usr/sbin/nscd" 1 red
PROC "%iscsid" 2 2 red
LOAD 16.5 20.0
LOG %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
LOG %/var/log/messages
%(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow
The Part in client-local.cfg:
[cn44-hp]
log:/var/log/messages:10240
ignore MARK
trigger ALERT
trigger .*(dumping log to)|(evicted).*
file:/var/log/messages
The Issue:
Every time I put the word "/evicted/" manually in the messages file,
hobbit will go red for about 15 minutes. That's fine. If I put a second
line with the word "/kernel/" in the messages file, a second (yellow)
line appears in the mesgs column. That's also fine. Hobbit is still
red, but stays that way only for about 15 minutes. After the 15 minutes,
it changes to yellow and the "/evicted/" warning is gone. It stays
yellow for another 15 minutes, and then it turns green.
The messages file is really small (under 10 KByte) and not much is being
written in it. That's why hobbit must stay red all the time!?!
I searched for the number 900 in server/etc, but nothing matches (exept
some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi