This is working on my side. Also you can click on “Client data” at the bottom of the hobbit we page to see the data that is being passed.

Here is a snippet of my client-loal.cfg. Be sure that your class [win32] comes after your win32 hostname entry. It seems that which ever one if finds first that is the one that is used so if [win32] is blank then nothing happens.

[mailrelay]

file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt

eventlog:Application

ignore information

ignore success

ignore message could not be scanned

ignore Error occurred in Scanning

eventlog:Security

ignore information

ignore success

ignore MAILRELAY Error Code: 0x0

eventlog:System

ignore information

ignore success

[win32]

Here is a snippet of my hobbit-clients.cfg. NOTE: be sure that the [default] is at the end of the file.

HOST=mailrelay

UP 30m 1w

LOAD 40.0 70.0

DISK * 90 95

FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800

LOG %.* %WARNING  COLOR=yellow

LOG %.* %ERROR  COLOR=red

PROC AGDigestSvc.exe  1 1

PROC AgDomSvc.exe  1 1

Hope this helps.

Robert

From: Chris Strzelczyk [mailto:chris4136 at gmail.com] Sent: Thursday, August 28, 2008 12:17 PM To: hobbit at hswn.dk Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages. I searched the groups and can not find an answer that differs from my setup. Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work. Currently I am filtering by hostnames, but I would like to filter by CLASS. I have the following in my files.

bb-hosts: xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6] log:system ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=yellow

In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You -cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <rmcgraw at purdue.edu> wrote:

Anna,

I have not had good luck using class names so I have stayed with using host name. Make sure that your hostname of the same class comes before the class name. Ever which one it finds first that is the one it will use. So if you have an empty class name and a host name of the same class comes after the class name nothing will happen.

So here is my client-local.cfg I have

[hostname.xxx.purdue.edu] file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt eventlog:Application ignore information ignore success ignore message could not be scanned ignore Error occurred in Scanning eventlog:Security ignore information ignore success ignore MAILRELAY Error Code: 0x0 eventlog:System ignore information ignore success

and my hobbit-client.cfg

HOST=hostname.xxx.purdue.edu UP 30m 1w LOAD 40.0 70.0 DISK * 90 95 FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=red PROC AGDigestSvc.exe 1 1 PROC AgDomSvc.exe 1 1

In my use I have found that the epoch time is not calculated correctly. It seems that it will take the local time to calculate GMT and not adjust for the time zone.

I have document this in the BBWIN mail list.

Hope this helps.

Robert

-----Original Message----- From: Anna Jonna Armannsdottir [mailto:annaj at hi.is] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit

I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles in Windows XP.

in client local i want to put this: [win32] log:/var/log/messages:10240

Any clue, anybody?

-- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.

To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (586) 770-9544 (248) 944-0506 (Business Hours Office Phone) chris at gcsrealestate.com

Still not working.

My alert still turns red. Do you know if there is any other configuration in some other file that affects this behavior? I even tried a different string incase I was missing something in the first ignore string. My [win32] and [default] values are below my server definitions. Not sure where to go on this problem at this point. ~ Thank You for your help.

I even tried to provied the same case as you:

My client-local.cfg:

[stfwin6] eventlog:System ignore TermServDevices ignore Printer Driver required

[win32]

My hobbit-clients.cfg:

HOST=stfwin6 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=yellow

On Thu, Aug 28, 2008 at 1:49 PM, Aaron Zink <AaronZink at eharmony.com> wrote:

I could never get the ignore clause to work in for the event log either. Let me know if you have any luck!

I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops. I don't know if this applies to you.

My client-local.cfg looks like:

[win32] eventlog:security ignore .*success.* eventlog:application ignore BigBrotherHobbitClient eventlog:eventlog_application ignore BigBrotherHobbitClient eventlog:system ignore TermServDevices ignore information file:C:\Program Files\BBWin\bin\BBWin.exe:md5

None of the ignore statements work.

Aaron Zink Manager, Corporate IT eHarmony.com 626.795.4814

-----Original Message----- From: Chris Strzelczyk [mailto:chris4136 at gmail.com] Sent: Thursday, August 28, 2008 09:17 To: hobbit at hswn.dk Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages. I searched the groups and can not find an answer that differs from my setup. Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work. Currently I am filtering by hostnames, but I would like to filter by CLASS. I have the following in my files.

bb-hosts: xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6] log:system ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=yellow

In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You -cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <rmcgraw at purdue.edu> wrote:

   Anna,

   I have not had good luck using class names so I have stayed with

using host name. Make sure that your hostname of the same class comes before the class name. Ever which one it finds first that is the one it will use. So if you have an empty class name and a host name of the same class comes after the class name nothing will happen.

   So here is my client-local.cfg I have


   [hostname.xxx.purdue.edu]
   file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
   eventlog:Application
   ignore information
   ignore success
   ignore message could not be scanned
   ignore Error occurred in Scanning
   eventlog:Security
   ignore information
   ignore success
   ignore MAILRELAY Error Code: 0x0
   eventlog:System
   ignore information
   ignore success

   and my hobbit-client.cfg

   HOST=hostname.xxx.purdue.edu
      UP 30m 1w
      LOAD 40.0 70.0
      DISK * 90 95
      FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red

CTIME<100800 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=red PROC AGDigestSvc.exe 1 1 PROC AgDomSvc.exe 1 1

   In my use I have found that the epoch time is not calculated

correctly. It seems that it will take the local time to calculate GMT and not adjust for the time zone.

   I have document this in the BBWIN mail list.

   Hope this helps.

   Robert




   > -----Original Message-----
   > From: Anna Jonna Armannsdottir [mailto:annaj at hi.is]
   > Sent: Thursday, August 21, 2008 3:43 PM
   > To: Hobbit user
   > Subject: [hobbit] configuration of bbwin clients in Hobbit
   >
   >
   > I want to monitor the size of the logfiles on windows servers.
   > I want to put a line in hobbit-clients.cfg like this:
   >
   > FILE /var/log/messages SIZE>0 MTIME<604800 yellow
   >
   > Does anybody have a clue about the name and paths of logfiles
   > in Windows XP.
   >
   > in client local i want to put this:
   > [win32]
   > log:/var/log/messages:10240
   >
   > Any clue, anybody?
   >
   > --
   > Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because

people > read from top to bottom. > Unix System Aministration, Computing Services, %& Q: Why is top > posting bad? > University of Iceland. > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >

-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (586) 770-9544 (248) 944-0506 (Business Hours Office Phone) chris at gcsrealestate.com

To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (586) 770-9544 (248) 944-0506 (Business Hours Office Phone) chris at gcsrealestate.com