This works for me:
LOG /var/log/named/named.log "%(critical|general: error:)" COLOR=red "IGNORE=%(zone serial unchanged)"
I think my use of parentheses is superfluous in this example.
On 4 March 2013 17:44, Phil Crooker <Phil.Crooker at orix.com.au> wrote:
I'm having a problem with spaces in regular expressions when trying to IGNORE log entries. So for the line:
warning - 2013/03/04 12:52:21 - BigBrotherXymonClient (17) - The agent externals generated this event message : No externals have been specified
works: LOG eventlog_application %^warning COLOR=red IGNORE=%Client.*17 works: LOG eventlog_application %^warning COLOR=red IGNORE=%Client.*[0-9]7 works: LOG eventlog_application %^warning COLOR=red IGNORE=Client\ \(17 works: LOG eventlog_application %^warning COLOR=red IGNORE=No\ externals\ have\ been\ specified
doesn't work: LOG eventlog_application %^warning COLOR=red IGNORE=%"Client \([0-9]7" doesn't work: LOG eventlog_application %^warning COLOR=red IGNORE="Client \(17" doesn't work: LOG eventlog_application %^warning COLOR=red IGNORE="Client (17" doesn't work: LOG eventlog_application %^warning COLOR=red IGNORE="No externals have been specified"
Is this correct? If so, why no spaces??? It is very confusing as spaces are used elsewhere, eg I can have spaces in a DISK name in analysis.cfg: DISK "/yada yada" 90 95, and spaces can be used in various places in hosts.cfg.
thanks, Phil
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon