Hi I have setup syslog forwarding to zenoss which works fine. Created a new Event Class "StorageErrors" with a mapping to kernel_StorageErrors where I have defined
Event Class Key - kernel Sequence - 1 Rule - Regex - end_request ( this is the string I am interested in reporting) The above works fine with event been captured and passed to correct Event Class My question is - how can I filter multiple occurences of the same message to only create one event. If the Regex is exactly the same each time Zenoss does this automatically by increasing the count. My problem is that I may get multiple messages which are not identical but similar ( see below) - I just want on alert sent out Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 148955392 Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 148955400 Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 147652864 Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 147652872 Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 8446208 Jan 14 08:54:13 testnode kernel: end_request: I/O error, dev sdc, sector 8446216 PS Is there any way to clear these automatically many thanks -------------------- m2f -------------------- Read this topic online here: http://forums.zenoss.com/viewtopic.php?p=30042#30042 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
