On Mon, Nov 27, 2006 at 11:03:18AM +0100, Pierre Ronnefalk wrote:

Hi,

I have the following check

HOST=host01 LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR

Try moving the IGNORE before the COLOR setting.

LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red

(both should work, but I'm not sure they do).

Regards, Henrik

Either:

" Try moving the IGNORE before the COLOR setting. LOG /var/adm/messages %ERROR IGNORE=ARERR COLOR=red "

or this

" Try this synthax : LOG /var/adm/messages %WARNING yellow "IGNORE=AERR" LOG /var/adm/messages %ERROR red "IGNORE=ARERR" "

Works.....

/Pierre

From: Pierre Ronnefalk [mailto:pierre.ronnefalk at relacom.com] Sent: den 27 november 2006 11:03 To: hobbit at hswn.dk Subject: [hobbit] Check log - ignore

Hi,

I have the following check

HOST=host01 LOG /var/adm/messages %WARNING COLOR=yellow IGNORE=ARERR LOG /var/adm/messages %ERROR COLOR=red IGNORE=ARERR

The problem is that ignore is not working. If i understand it right the rows with the ignore text shoult not show up.

I have also tried IGNORE=%ARERR, but sam result...

/Pierre

[####################### RELACOM CORPORATE EMAIL FOOTER #######################]

1. This communication is confidential and is only intended for use of the individual or entity to which it is directed. If you are not the intended recipient of this email, please delete it without forwarding any of its contents.
2. Opinions and thoughts expressed in this email may be the personal opinions of the sender and do not necessarily represent the corporate values of Relacom.
3. For further information please visit: http://security.relacom.com/email/

[####################################################################### ###########]