I'm probably missing something obvious here, but I'm getting stuck I'm looking at a logfile and I would like to ignore lines like this:
Sep 11 22:24:36 10.65.0.6 apcontroller: *bcastReceiveTask: Sep 11 22:24:36.407: %DTL-4-ARP_ORPHANPKT_DETECTED: dtl_net.c:1426 STA(Target MAC Address) [d4:9a:20:58:46:34, 0.0.0.0] ARP (op ARP REQUEST) received with invalid SPA(Source IP Address) 10.0.10.157/TPA(Destination IP Address) 10.0.10.1
I've been playing around with variations like log:/appdata/logserver/local7.log:102400 IGNORE (apcontroller|cli.WARNING|cli.NOTICE) or log:/appdata/logserver/local7.log:102400 IGNORE apcontroller|cli.WARNING|cli.NOTICE or log:/appdata/logserver/local7.log:102400 IGNORE= (apcontroller|cli.WARNING|cli.NOTICE) or log:/appdata/logserver/local7.log:102400 IGNORE=%(?-i)apcontroller|cli.WARNING|cli.NOTICE
and even log:/appdata/logserver/local7.log:102400 IGNORE apcontroller
(I'd like to ignore the cli.WARNING and cli.NOTICE too, but there are really too many apcontroller lines)
Please, what is the syntax I need for this? Or is this a problem because it's a complicated line containing so many special sorts of characters?
thanks Betsy