On the message page I am getting the following results. In the client-local.cfg file it says: log:/var/log/messages:10240 trigger NOTICE trigger WARNING

log:/var/log/secure:10240 ignore "Connection closed by"

trigger BREAKIN

In hobbit-clients.cfg it says: LOG /var/log/messages WARNING COLOR=yellow LOG /var/log/messages NOTICE COLOR=red LOG /var/log/secure BREAKIN

Yet, nothing appears in the top half and it never changes from green.

No entries in /var/log/messages

No entries in

/var/log/secure

Full log /var/log/messages Jan 10 13:31:40 sirona ecroft: NOTICE

Full log /var/log/secure Jan 10 13:22:50 sirona sshd[5087]: Connection closed by

10.0.14.249 Jan 10 13:27:51 sirona sshd[5133]: Connection closed by 10.0.14.249 Jan 10 13:31:38 sirona ecroft: BREAKIN

Jan 10 13:32:52 sirona sshd[5181]: Connection closed by 10.0.14.249 Jan 10 13:37:53 sirona sshd[5227]: Connection closed by 10.0.14.249 Jan 10 13:42:54 sirona sshd[5273]: Connection closed by 10.0.14.249 Jan 10 13:47:55 sirona sshd[5319]: Connection closed by 10.0.14.249 Jan 10 13:52:56 sirona sshd[5365]: Connection closed by 10.0.14.249

"Keep away from people who try to belittle your ambitions. Small people always do that, but the really great make you feel that you, too, can become great."

• Mark Twain

Join Excite! - http://www.excite.com The most personalized portal on the Web!