[hobbit] Re: LOG test fails to IGNORE ?

The 'hobbit-clients.cfg' man page give this example: LOG /var/log/daemon.log %WARNING|NOTICE COLOR=yellow IGNORE=lpr

This is identical to mine except the actual log file name and strings.

On 9/29/06, Olivier Boyaval <oboyaval at ch-bethune.fr> wrote:

Jerry Yu a écrit :

...

any one ?

On 9/28/06, *Jerry Yu* <jjj863 at gmail.com <mailto:jjj863 at gmail.com>> wrote:

hi,
I have one single Hobbit server running 4.2RC1-20060712 on CentOS
4. Clients have some harmless SELinux warning messages in
/var/log/messages. I configured Hobbit to ignore such lines (conf
entries appended).
However, the LOG test still generates alerts. Below is excerpted
from an email alert. Any idea why? I brought up before 4.2 final
version is released, I believe, and was told it should not be the
case.

&yellow Sep 28 15:58:20 saturn su[4070]: Warning!  Could not
relabel  with user_u:object_r:devpts_t, not relabeling.

---cut---x------ hobbit-clients.cfg -----x-------cut-----
HOST=saturn
log /var/log/messages %WARNING|NOTICE|ERROR COLOR=yellow
IGNORE=relabeling
---cut---x------ clients-local.cfg -----x-------cut-----
[saturn]
log:/var/log/messages:10240
ignore MARK

You can test :

log /var/log/messages %WARNING|NOTICE|ERROR yellow "IGNORE=relabeling"

and

ignore RELABELING

Cdl

Olivier