Olivier Boyaval wrote:
David Gore a écrit :
Try this:
[agecanonix] log:/var/log/messages:10240 trigger WARNING|ERROR log:/home/sirt/log/alarm_tina.log:10240 trigger major|critical
I do not think '%' (pcre) is supported in this file.
I have tested with "trigger major|critical" and "trigger Major|Critical" and "trigger Critical" and "trigger critical"
that doesn't run :-(
Olivier
Login to the client host, agecanonix and look for these files:
cd ~/client/tmp && ls -al *status *cfg
Then you may want to try what you see in the .cfg by hand. You should see something like this in the .cfg file:
log:/var/adm/messages:10240 trigger WARNING|ERROR log:/home/sirt/log/alarm_tina.log:10240 trigger major|critical
Which should mirror your config. Then try grepping by hand to see if you get what you want:
egrep -ei 'WARNING|ERROR' /var/adm/messages
And you are using Hobbit 4.2.0, if not then you need to upgrade.