Currently, the output of dmidecode product name is used as the match
expression in a regex. I think this is backwards. I would change:
if $stanza=~/$ProductName/;
to:
if $ProductName=~/$stanza/;
This would first allow envrules entries that more broadly describe a
vendors conventions for multiple models and also not completely break on
IBM systems that have MT embedded like '[1234]' in them. If you want to
test for strict equality, 'eq' would be fine, but current code can't
reasonably cope with IBM DMI output.
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure
contains a definitive record of customers, application performance,
security threats, fraudulent activity, and more. Splunk takes this
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Collectl-interest mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/collectl-interest
