I am using logdigest to notify me of some important messages in logfiles and it normally works quite well.
But now I have a configuration problem with it and I cannot find any real documentation on it. The only documentation is the README file and that is not much. Maybe someone here can help me. Situation is: I have a web server and I want to see only login and logout messages from the one log file. So, in alarming.local I have: --<snip>-- GET /complogin.php GET /logout.php --<snip>-- When I run a test with grep -f alarming.local <logfile>, it works perfect, only showing those messages. If don't have anything in the ignore.local file, then I get a nice mail that shows the login and logout messages under: Messages matching keywords in the "alarming" list: Unfortunately it also lists all the apache GET and POST messages under: All lines that are not in the "ignore" list: But I am not interested in all of those, so I put the following in alarming.local: --<snip>-- GET POST --<snip>-- But, now I get no messages in the report, not even the ones that match alarming.local. Any Idea how I can only see messages that match what is in my alarming.local? I suppose I can enter every possible HTTP request other than the two in alarming.local in ignore.local, but that means that it will be an endless list. Every time the web app change, I will need to edit ignore.local. Any ideas? Thanks -- Andre Truter | Software Consultant | Registered Linux user #185282 Jabber: [EMAIL PROTECTED] | http://www.trusoft.co.za ~ A dinosaur is a salamander designed to Mil Spec ~ -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
