Example: Go red if the text "I/O error" or "read error"

appears.

LOG %/var/(adm|log)/messages %(I/O|read).error COLOR=red

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle

On Fri, Sep 18, 2009 at 11:27 AM, Camelia Anghel <canghel at cjh.org> wrote:

Did that but it look for all messages that have one of the 3 words

Thanks anyway

Camelia

-----Original Message----- *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com] *Sent:* Friday, September 18, 2009 11:22 AM *To:* hobbit at hswn.dk *Subject:* Re: [hobbit] how to search for exact word patterns

I think it's:

HOST=my.host.com LOG /var/log/messages "out of memory" COLOR=red

Not tested.

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle

On Fri, Sep 18, 2009 at 9:26 AM, Camelia Anghel <canghel at cjh.org> wrote:

Hello all, I am trying to set up an alert to search for exact word patterns in /var/log/messages. For example: "Out of Memory"

Any help would be appreciated.

Thanks, Camelia

To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk