30 Oct
2007
30 Oct
'07
9:17 a.m.
Hi,
In hobbit-clients.cfg LOG configuration, I want to catch critical event lines, which have the keyword "EventID" and either keyword of failed, failure or error. Looks this line doesn't work, any idea please?
LOG /var/log/messages %EventID.*(failed|failure|error)
thanks,
Geng