I have a problem with a named exiting occasionally. In an attempt to alert myself when it happens, I placed the following in my analysis.cfg...
LOG %/var/(adm|log)/messages "%named%general%exiting" COLOR-=yellow
...yet when the following appeared...
[date.time] [host] named[9999]:daemon.notice<99>: general: exiting
..nothing happened. I even restarted xymon, waited for a new occurrence, and it still didn't turn yellow.
Am I wildcarding correctly, or is there a better way to find this line?
Thanks, David
Found the solution. This works...
LOG %/var/(adm|log)/messages "%named.*?general.*?exiting" COLOR-=yellow
Found it in a 2009 Xymon archive after some serious digging. :)
Thanks!
On Thu, Sep 3, 2015 at 9:28 AM, David Welker <dewelker at gmail.com> wrote:
I have a problem with a named exiting occasionally. In an attempt to alert myself when it happens, I placed the following in my analysis.cfg...
LOG %/var/(adm|log)/messages "%named%general%exiting" COLOR-=yellow
...yet when the following appeared...
[date.time] [host] named[9999]:daemon.notice<99>: general: exiting
..nothing happened. I even restarted xymon, waited for a new occurrence, and it still didn't turn yellow.
Am I wildcarding correctly, or is there a better way to find this line?
Thanks, David
On Thu, Sep 3, 2015, at 10:35, David Welker wrote:
Found the solution. This works...
LOG %/var/(adm|log)/messages "%named.*?general.*?exiting" COLOR-=yellow
Found it in a 2009 Xymon archive after some serious digging. :)
Could the wording in the analysis.cfg man page for LOG be improved in any way?
Hi, I think that this is fairly well documented: "logfilename" is the name of the logfile. Only logentries from this filename will be matched against this rule. Note that "logfilename" can be a regular expression (if prefixed with a '%' character).
"pattern" is a string or regular expression. If the logfile data matches "pattern", it will trigger the "msgs" column to change color. If no "color" parameter is present, the default is to go "red" when the pattern is matched. To match against a regular expression, "pattern" must begin with a '%' sign - e.g "%WARNING|NOTICE" will match any lines containing either of these two words. Note that Xymon defaults to case-insensitive pattern matching; if that is not what you want, put "(?-i)" between the "%" and the regular expression to turn this off. E.g. "%(?-i)WARNING" will match the word WARNING only when it is upper-case.
The thing is that "%" character is not used to match other characters or strings in regular expressions. It just instructs Xymon that the following string is a regex, not a string value.
Regards, Martin
On 4 September 2015 at 17:34, Mark Felder <feld at feld.me> wrote:
On Thu, Sep 3, 2015, at 10:35, David Welker wrote:
Found the solution. This works...
LOG %/var/(adm|log)/messages "%named.*?general.*?exiting" COLOR-=yellow
Found it in a 2009 Xymon archive after some serious digging. :)
Could the wording in the analysis.cfg man page for LOG be improved in any way?
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
Mark,
Martin is right. If you read carefully, all the information is there. It would just be nice to have more examples indicating what works for wildcard situations. I was using someone else's posted example, which turned out to be wrong (or relating to an old way of doing things).
Regards, David
On Fri, Sep 4, 2015 at 1:00 PM, Martin Lenko <lenko99 at gmail.com> wrote:
Hi, I think that this is fairly well documented: "logfilename" is the name of the logfile. Only logentries from this filename will be matched against this rule. Note that "logfilename" can be a regular expression (if prefixed with a '%' character).
"pattern" is a string or regular expression. If the logfile data matches "pattern", it will trigger the "msgs" column to change color. If no "color" parameter is present, the default is to go "red" when the pattern is matched. To match against a regular expression, "pattern" must begin with a '%' sign - e.g "%WARNING|NOTICE" will match any lines containing either of these two words. Note that Xymon defaults to case-insensitive pattern matching; if that is not what you want, put "(?-i)" between the "%" and the regular expression to turn this off. E.g. "%(?-i)WARNING" will match the word WARNING only when it is upper-case.
The thing is that "%" character is not used to match other characters or strings in regular expressions. It just instructs Xymon that the following string is a regex, not a string value.
Regards, Martin
On 4 September 2015 at 17:34, Mark Felder <feld at feld.me> wrote:
On Thu, Sep 3, 2015, at 10:35, David Welker wrote:
Found the solution. This works...
LOG %/var/(adm|log)/messages "%named.*?general.*?exiting" COLOR-=yellow
Found it in a 2009 Xymon archive after some serious digging. :)
Could the wording in the analysis.cfg man page for LOG be improved in any way?
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
participants (3)
-
dewelker＠gmail.com
-
feld＠feld.me
-
lenko99＠gmail.com