[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bigsister-general] "Ignore" rules in eventlog and syslog


Douglas Valkenaar wrote on Tue, 4 Apr 2006 22:13:41 -0700:

> I hope you understood that my point was that there are "default" 
> events that you want flagged, and specific others that can be handled 
> specially.  But, what about those that I'd rather ignore?  I don't 
> want a special status or anything reported - I just want those lines 
> ignored from the logs.

That is what commenting them out does. I was looking at your first message 
and wondering if I should reply or not or if I misunderstood your question 
since the answer is so obvious. Lines that don't get matched by syslog are 
not reported at all, not green, not purple, not anything. Remove that line 
completely and if you still get a status about it, one of the other regexp 
matches it. F.i., first thing I do on a news setup is change the "loop" 
line to "looping" because "loop" delivers false positives.

Does this example from one of my machines help?

/var/log/mail:

default             green   0   mail looks fine
stat=Sent           green   10  mail transmitted
looping             yellow  10  mail: MX problem
#ERROR\sSTATE       red     30  mail: corral crash
init failed to open yellow  10  mail: corral crash
stat=Please         yellow  10  mail: corral problem (Virus!)
#######################################################################
/var/log/warn:

default             green   0   warn looks fine
kernel paging request   red 10  warn: Kernel Oops
EIP                 red 10  warn: Kernel Oops
assertion           yellow  30  warn: Kernel Assertion

#######################################################################
#/var/log/kernel-warning.log:

#default                green   0   kernel looks fine
#EIP                    red 60  kernel: Kernel Oops
#assertion          red 60  kernel: Kernel Assertion


Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com





-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Bigsister-general mailing list
suppressed
https://lists.sourceforge.net/lists/listinfo/bigsister-general


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.