[hobbit] msgs - Multiple ignore patterns

Didn't worked... :-(

This syntax work for you ?

Thank you!

Sean Hennessey wrote:

I'd hazard a quess that what your regex is saying is

Plugin create statement from [userPassword or plugin] doing query. Try putting () around the statements.

(Plugin create statement from userPassword)|(plugin doing query). Not sure if you need to escape the ()'s or not.

Sean

-----Original Message----- From: Giovanni - Gestor Redix [mailto:giovanni at redix.com.br] Sent: Friday, May 18, 2007 1:35 PM To: hobbit at hswn.dk Subject: [hobbit] msgs - Multiple ignore patterns

Hi everyone,

I've applied the all-in-one patch but i still couldn't get multiple 

patterns to work in IGNORE parameter... Here is my configuration:

LOG /var/log/syslog "%password|error|fail|changed|tcpd|Accepted" COLOR=red IGNORE=%plugin create statement from userPassword|plugin doing query SELECT LOG /var/log/auth.log "%password|error|fail|changed|tcpd|Accepted|jovial|tenebroso" COLOR=red IGNORE=%plugin create statement from userPassword|plugin doing query SELECT

Why this regex don't work ? Any idea ?

Thank you all the attention...

Cheers