Hi Craig,
I think I have found the reason of non parsing, I already have seen this (bug?)
with snmptrapd one year ago: when 2 same events come at the same time, the
events don't appear like they have to.
+------+---------------------+----------------------------------------------
SELECT type, date, info from events where type=1;
| 1 | 2005-02-15 19:09:22 | mysqld[16321]:
|
| 1 | 2005-02-16 21:23:13 | mysqld[2328]:
|
| 1 | 2005-02-18 06:27:32 | mysqld[2330]:
|
| 1 | 2005-02-18 06:27:32 | mysqld[2330]:
|
| 1 | 2005-02-18 15:29:35 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:29:35 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:31:26 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:31:26 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:48:03 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:48:03 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:55:05 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:55:05 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:58:02 | administrator[error] 1104 Fan sensor
| 1 | 2005-02-18 15:58:02 | administrator[error] 1104 Fan sensor
+------+---------------------+----------------------------------------------
==> from the events screen I only see 1 event for each "double OMA event"
18 Feb 15:55:05 Unknown FMREP1 fm C: dministrator[error]
18 Feb 15:31:26 Unknown FMREP1 fm C: administrator[error] 1104
18 Feb 15:28:06 Unknown FMREP1 fm C: administrator[error] 1104
Do you know how can I solve this ? because of course OMA is not open source :)
Thanks for your time
_________________________________
David LIMA
Professional Services
www.scc.com
-----Message d'origine-----
De�: Craig Small [mailto:[EMAIL PROTECTED]
Envoy�: mardi 22 f�vrier 2005 23:06
��: LIMA David
Cc�: [email protected]
Objet�: Re: RE : [jffnms-users] New event type: parsing problem
On Tue, Feb 22, 2005 at 11:17:59AM +0100, LIMA David wrote:
> You are right Craig, the table was too large to feet in my mail so I cut it
> off, I have attached my sql export to this mail.
I checked your match with the pcretest and it returns the right values:
re> /^(administrator)\[error\]\s*(\S+)\s*(\S.*)/
data> administrator[error] 1104 Fan sensor Main System Chassis Previous state
was: Unknown Fan sensor value (in RPM): 0
0: administrator[error] 1104 Fan sensor Main System Chassis Previous state
was: Unknown Fan sensor value (in RPM): 0
1: administrator
2: 1104
3: Fan sensor Main System Chassis Previous state was: Unknown Fan sensor value
(in RPM): 0
> The message appears as "UNKNOWN" in JFFNMS events screen. I don't understand
> why because it has to be matched by the "Windows error" which is in position
> 10 (after my new event which is in position 1)
Check the events table to find the entry and check the type field,
perhaps with
select type,info from events order by id desc limit 5;
That will tell you what the info is.
- Craig
--
Craig Small GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5
Eye-Net Consulting http://www.enc.com.au/ MIEE Debian developer
csmall at : enc.com.au ieee.org debian.org
------------------------------------------------------------------------------------------
Ce message contient des informations dont le contenu est susceptible d'�tre
confidentiel.
Il est destin� au(x) destinataire(s) indiqu�(s) exclusivement.
A moins que vous ne fassiez partie de la liste des destinataires, ou que vous
soyez
habilit� � recevoir le mail � leur place, il vous est interdit de le copier, de
l'utiliser
ou de d�voiler son contenu � un tiers.
Si vous avez re�u cet email par erreur, merci de prendre contact avec
l'�metteur.
Les opinions exprim�es dans cet e-mail sont celles de l'�metteur et ne
refl�tent pas
n�cessairement celles de l'entreprise.
Ce e-mail peut contenir des pi�ces jointes dont certaines pourraient contenir
des virus
qui pourraient endommager votre syst�me informatique.
La compagnie a pris toutes dispositions afin de minimiser ce risque et d�cline
toute
responsabilit� pour toute perte ou dommage r�sultant directement ou
indirectement de
l'utilisation de cet email ou de son contenu.
Il vous appartient d'effectuer vos propres contr�les anti-virus avant d'ouvrir
la ou les pi�ces jointes.
------------------------------------------------------------------------------------------
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
jffnms-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jffnms-users
