On Mon, Feb 21, 2005 at 06:54:32PM +0100, LIMA David wrote: > I have created an Event type: > | 10001 | APC | Warning | <info> > | Always | X > | 10002 | Dell OM Warn | Warning | <interface>: <info> (ID:<state>) > | Always | X > | 10003 | Dell OM Error | Big Fault | <interface>: <info> (ID:<state>) > | Always | X
> Syslog Events Types > | 10002 | ^(administrator)\[warning\]\s*(\S+)\s*(\S.*) > | 1 | | 2 | You have not shown the whole table, for example the event type that is used for this syslog match. > The problem is when I have a message like this one: administrator[error] 1104 > Fan sensor detected a failure value Sensor location: Front System Fan > Chassis location: Main System Chassis Previous state was: Unknown Fan sensor > value (in RPM): 0 > > > The message appears like this in the Events screen : > > C: administrator[error] 1104 Fan sensor detected a failure value Sensor > location: Front System Fan Chassis location: Main System What event type is this showing up as? Look at the type table. The C: might just be a random string rather than anything real. The syslog rules drive which event type is created and what are the values for interfaces, info, user etc. - Craig -- Craig Small GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5 Eye-Net Consulting http://www.enc.com.au/ MIEE Debian developer csmall at : enc.com.au ieee.org debian.org ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ jffnms-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jffnms-users
