I guess I'm dense... I bought the Zenoss book (by Badger) and while I like it a lot, this chapter (Event Mgt) needs to be more informative - maybe more examples...
It is still vague what these fields are for, example: "Rule: Expression that evaluates the current even using the evt environment variable." OK - after it evaluates it what does it do? If the evaluation is false does it discard the event altogether? "Regex: regular expression used to match the current event details" No kidding - then what happens? What does it do with the matches? What would happen to the event if the REGEX wasnt there? Can I have a Transform and a Rule and a REGEX for one event definition or is it just 1 of the 3? Let me see an example with one of each if possible..... Here is an example: I have an /App/Fail for NETLOGON component that I want out of the event console (ie dropped) for certain systems. Do I use Transform to change the event state to 2 if component = NETLOGON? Do I use Rule to match on NOT (Component=NETLOGON)? Do I need REGEX at all? I guess I just don't get it yet.... Thanks for the help though -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=23415#23415 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
