Hi,
We cannot test our rules with other color than red: the matching messages always show same results for the "red" color:
[bb at iris bin]$ ./hobbitd_alert --test bilbo msgs red | egrep "Match with|Mail alert|Script alert" 00017141 2006-07-06 11:05:04 *** Match with 'PAGE=%^$ *** 00017141 2006-07-06 11:05:04 *** Match with '$MAIL_DH' *** 00017141 2006-07-06 11:05:04 Mail alert with command 'mail -s "Hobbit [12345] bilbo:msgs CRITICAL (RED)" xxx.yyy at sample.com' 00017141 2006-07-06 11:05:04 *** Match with 'HOST=$ADMIN_HOSTS' *** 00017141 2006-07-06 11:05:04 *** Match with '$SMS_DH' *** 00017141 2006-07-06 11:05:04 Script alert with command '/soft/pub/BB/hobbit/server/bin/sendsms' and recipient 0123456789 00017141 2006-07-06 11:05:04 *** Match with 'HOST=*' *** 00017141 2006-07-06 11:05:04 *** Match with '$MAIL_ROOT UNMATCHED' ***
[bb at iris bin]$ ./hobbitd_alert --test bilbo msgs yellow | egrep "Match with|Mail alert|Script alert" 00017239 2006-07-06 11:05:56 *** Match with 'PAGE=%^$ *** 00017239 2006-07-06 11:05:56 *** Match with '$MAIL_DH' *** 00017239 2006-07-06 11:05:56 Mail alert with command 'mail -s "Hobbit [12345] bilbo:msgs CRITICAL (RED)" xxx.yyy at sample.com' 00017239 2006-07-06 11:05:56 *** Match with 'HOST=$ADMIN_HOSTS' *** 00017239 2006-07-06 11:05:56 *** Match with '$SMS_DH' *** 00017239 2006-07-06 11:05:56 Script alert with command '/soft/pub/BB/hobbit/server/bin/sendsms' and recipient 0123456789 00017239 2006-07-06 11:05:56 *** Match with 'HOST=*' *** 00017239 2006-07-06 11:05:56 *** Match with '$MAIL_ROOT UNMATCHED' ***
Same results with "purple" color.
PS: this is 4.2-beta-10060601
Any ideas?
Dominique UNIL - University of Lausanne