On 11 September 2014 22:31, Neil Simmonds <neilsimmonds1808 at gmail.com> wrote:
Not sure why the last reply was truncated. What I intended to say was that all my other tests have double quotes around them as they all contain spaces. I don't think it's the quotes that's the issue although it may be something to do with the escaped double quote just before the word WebContainer
Yes, the token matching code looks for tabs or spaces as separators, or for double-quotes as book-end terminators for the tokens. It doesn't know about escaped double-quotes, and so you cannot use them in your regular expressions. Instead you can could match with a dot, or an equivalent to a quote, such as:
LOG /xymon/server/etc/test.log "%Thread \x22WebContainer.{1,75} and may be hung*" COLOR=yellow
The "\x22" adds the ASCII character for hex 22, which is the double quote.
J