[Xymon] problem with LOG and IGNORE in analysis.cfg

-----Original Message----- From: Elizabeth Schwartz [mailto:betsy.schwartz at gmail.com] Sent: Friday, August 12, 2011 2:56 PM To: Lee, Raymond Cc: xymon at xymon.com Subject: Re: [Xymon] problem with LOG and IGNORE in analysis.cfg

I think your regular expressions are not right. Try runnign them through pcretest.

...

           LOG /var/adm/messages %ERROR|WARNING COLOR=red

IGNORE=TEST

I think that should be %(ERROR|WARNING)

[Raymond Lee]

pcretest checks out fine:

    (xymon)@xymon:~$ pcretest
    PCRE version 7.8 2008-09-05

      re> /ERROR|WARNING/
    data> this is an ERROR
     0: ERROR
    data> this is a WARNING
     0: WARNING

And the man page for analysis.cfg has this example:

   Example: Trigger a yellow warning on all occurrences of the word "WARN‐
   ING"  or "NOTICE" in the "daemon.log" file, except those from the "lpr"
   system:
        LOG /var/log/daemon.log %WARNING|NOTICE COLOR=yellow IGNORE=lpr

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.