| Cheshire Cat Computing http://www.steveshipway.org/forum/ |
|
| Problems with filter http://www.steveshipway.org/forum/viewtopic.php?f=22&t=941 |
Page 1 of 1 |
| Author: | asg1290 [ Wed Jul 26, 2006 8:27 am ] |
| Post subject: | Problems with filter |
I'm trying to montor an eventlog entry that hass the event ID of 10000 and a event source string of "BlackBerry Dispatcher D1DAL6031" Here is the reg key Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Cheshire Cat\Nagios\Filter0] "filterDesc"="SRP Ping Fail" "eventLogName"="Application" "serviceName"="Application EventLog" "ID"="10000" "matchString"="" "source"="blackberry dispatcher d1dal6031" "eventLog"=dword:00000001 "Information"=dword:00000000 "status"=dword:00000002 "Warning"=dword:00000000 "Error"=dword:00000001 "Audit Success"=dword:00000000 "Audit Failure"=dword:00000000 "notID"=dword:00000000 "notMatch"=dword:00000000 "notSource"=dword:00000000 It can never find it, now if I remove the source string and just fire an alert on the event ID it works but I cannot get them to work together. What am I missing here? |
|
| Author: | stevesh [ Wed Jul 26, 2006 10:14 am ] |
| Post subject: | |
Remember that the source string is CASE Sensitive. Enter it *exactly* (including any spaces and punctuation) as it appers in the messages. |
|
| Page 1 of 1 | All times are UTC + 12 hours [ DST ] |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|