There isn't a rule, and I need to create one. This message from the event log gets flagged as Red in the msgs column. I realize that hobbit does age it out, but the owner doesn't want that specific message reported.
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
-----Original Message----- From: Rich Smrcina [mailto:rsmrcina at wi.rr.com] Sent: Friday, October 23, 2009 3:11 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Reprioritize an alert
Reprioritize is probably the wrong terminology. If there is a rule in hobbit-clients.cfg for that server and the owner wants it removed, then just remove them. The default behaviour is to not monitor log entries.
The column should eventually turn white. If it turns purple, you may need to remove the historical log entries. If it's a specific rule that needs to be removed, then delete it from hobbit-clients.cfg for that host.
See the man page of hobbit-clients.cfg for details.
Smith, Cathy wrote:
Hi
I've had a system owner ask me to re-prioritize an alert so the hobbit
ignores the message in the log on a specific server. The default alert marks the message as Red. The server runs Windows 2003. Can someone tell how to go about doing that or where to read about doing that? Is this done on the client or server?
Thanks for the help.
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
-- Rich Smrcina
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk