Solved. Thanks to getting some details from the following article about how Zenoss processes its rules.
http://www.mail-archive.com/[email protected]/msg22039.html The solution was to put defaultmapping in the EventClassKey field and then form my regex to match perfectly with the event coming across then use a transform of evt.severity = 0 to just all out drop the event. To match null data the regex was ^$ -------------------- m2f -------------------- Read this topic online here: http://forums.zenoss.com/viewtopic.php?p=33255#33255 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
