Hi,
the exclusion is supported in monit already via the "ignore match" option:
--8<--
check file syslog with path /var/log/syslog
ignore match "^\w{3} [ :0-9]{11} [._[:alnum:]-]+ monit\[[0-9]+\]:"
if match "^\w{3} [ :0-9]{11} [._[:alnum:]-]+ mrcoffee\[[0-9]+\]:" then alert
--8<--
Regards,
Martin
On Sep 12, 2012, at 1:39 PM, Nestor Urquiza <[email protected]> wrote:
> Martin,
>
> Does it make sense to add a feature request to handle exclusions? Also
> sending some lines after and before the match is useful, does it make sense
> as feature request as well? The alert can be sent to a different mailing list
> using "with mail-format" so in reality these two would be the only features
> to stop using LogMonitor and use monit also for app layer alerts.
>
> Thanks!
> -Nestor
>
>
> On Wed, Sep 12, 2012 at 7:01 AM, Martin Pala <[email protected]> wrote:
> Yet one note - the alert aggregation of the file content test is implemented
> in Monit already since version 5.4 ... changelog excerpt:
>
> --8<--
> * The content match test now sends one event per cycle and pattern.
> Even if there are multiple lines matching the same pattern, only
> one event will be generated.
> --8<--
>
> => the monit upgrade should fix your problem.
>
>
> The alert aggregation in M/Monit which i was talking about is generic for all
> events.
>
> Regards,
> Martin
>
>
>
> On Sep 12, 2012, at 10:01 AM, "Wang, Yongkun | Yongkun | BDD"
> <[email protected]> wrote:
>
>> Thanks Martin.
>>
>> I am looking forward to it.
>>
>> Regards,
>> Yongkun Wang
>>
>> From: Martin Pala <[email protected]>
>> Reply-To: This is the general mailing list for monit
>> <[email protected]>
>> Date: 2012年9月12日水曜日 16:44
>> To: This is the general mailing list for monit <[email protected]>
>> Subject: Re: Merge alerts into one email within one cycle for the same
>> service
>>
>> Hi,
>>
>> the implementation of alert aggregations (multiple events to one email) is
>> just in progress for the next M/Monit version. We can maybe add the same to
>> Monit in the future.
>>
>> Regards,
>> Martin
>>
>>
>> On Sep 12, 2012, at 9:09 AM, "Wang, Yongkun | Yongkun | BDD"
>> <[email protected]> wrote:
>>
>>> Hi,
>>>
>>> Is it possible to config Monit to merge alerts into ONE email within one
>>> cycle for the same service?
>>>
>>> For example,
>>>
>>> Check file my-log-file
>>> with path /var/log/my.log
>>> every "*/30 * * * *"
>>> If match "Exception" then alert
>>>
>>> There may be many alerts within 30 minutes cycle, for each alert monit will
>>> send an email, it is annoying sometime.
>>> So is it possible to merge them into one email?
>>>
>>> Monit is almost perfect for our current situation.
>>>
>>> Cheers,
>>> Yongkun Wang
>>>
>>>
>>> --
>>> To unsubscribe:
>>> https://lists.nongnu.org/mailman/listinfo/monit-general
>>
>> --
>> To unsubscribe:
>> https://lists.nongnu.org/mailman/listinfo/monit-general
>
>
> --
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general
>
> --
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general
--
To unsubscribe:
https://lists.nongnu.org/mailman/listinfo/monit-general
