Either:
" Try moving the IGNORE before the COLOR setting. LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red "
or this
" Try this synthax : LOG /var/adm/messages %WARNING yellow "IGNORE=AERR" LOG /var/adm/messages %ERROR red "IGNORE=ARERR" "
Works.....
/Pierre
From: Pierre Ronnefalk [mailto:pierre.ronnefalk at relacom.com] Sent: den 27 november 2006 11:03 To: hobbit at hswn.dk Subject: [hobbit] Check log - ignore
Hi,
I have the following check
HOST=host01 LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR
The problem is that ignore is not working. If i understand it right the rows with the ignore text shoult not show up.
I have also tried IGNORE=%ARERR, but sam result...
/Pierre
[####################### RELACOM CORPORATE EMAIL FOOTER #######################]
- This communication is confidential and is only intended for use of the individual or entity to which it is directed. If you are not the intended recipient of this email, please delete it without forwarding any of its contents.
- Opinions and thoughts expressed in this email may be the personal opinions of the sender and do not necessarily represent the corporate values of Relacom.
- For further information please visit: http://security.relacom.com/email/
[####################################################################### ###########]