Thanks Buchan!
HOST=%s068c32* LOG %.* %(fatal|error) COLOR=red IGNORE=ntpd
Shouldn't this be:
HOST=%s068c32.* LOG %.* %(fatal|error) COLOR=red IGNORE=ntpd
(Note the ., this is a regex, not a glob) Yes it should. I fear I newer learn regex. :-)
Now this seem to work. But I have some troubles with other filter expressions and a general understanding question.
- If I have more than one matching expression in hobbit-clients.cfg, which one(s) will be used:
HOST=s068a300 LOG %.* %(fatal|error) COLOR=red IGNORE=%(smb_proc_readdir_long|peer) HOST=s068a2.* LOG %.* %(fatal|error) COLOR=red IGNORE=%(bla|laber) DEFAULT LOG %.* %(fatal|error) COLOR=red IGNORE="ignore always"
Do I have to use a regex if I have multiple words to detect, like on the first statement? If I have many words to filter out the IGNORE statement may become lengthy. Can I have multiple IGNOREs to get a better readability?
What is the syntax if I have spaces in the expression. Is it like the DEFAULT statement above?
Regards Thorsten
If you are not the intended addressee, please inform us immediately that you have received this e-mail in error, and delete it. We thank you for your cooperation.