Re: [Observium] Syslog filters

On 30.09.2014 10:53, Markus Klock wrote:

Hmm, still no workie :( Added this to my config.php: $config['syslog']['filter'][] = "Wideband-Cable"; $config['syslog']['filter'][] = "Cabel Modem";

I think you need copy-paste strings from syslog page. As I see: - $config['syslog']['filter'][] = "Cabel Modem"; + $config['syslog']['filter'][] = "Cable Modem";

In first string may used a different dash symbol..

then did a service restart of syslog-ng. but still get these:

​/Markus

2014-09-29 17:04 GMT+02:00 Tom Laermans <tom.laermans@powersource.cx mailto:tom.laermans@powersource.cx>:

Yes, syslog.php keeps running with an open pipe, regardless of the
syslog software used. So it needs to be killed so it can respawn.

Tom


On 09/29/2014 04:41 PM, Mike Stupalov wrote:

...

On 29.09.2014 18:28, Markus Klock wrote:

...

Ah!
I use syslog-ng but i presume its the same deal?

Yes I think, but i never used syslog-ng :)

...

Thanks Mike!
/Markus
------------------------------------------------------------------------
Från: Mike Stupalov <mailto:mike@observium.org>
Skickat: ‎2014-‎09-‎29 15:15
Till: Observium Network Observation System
<mailto:observium@observium.org>
Ämne: Re: [Observium] Syslog filters

On 29.09.2014 15:50, Markus Klock wrote:

...

I also have this filter:
$config['syslog']['filter'][] = 'Wideband-Cable';

but still get:

​
Am I doing something wrong or is the syslog-filter not working
properly?
I am at r5835 btw.

You use rsyslog as syslog collector?

Than after change any syslog options in observium you should
reload rsyslog service:

$ service rsyslog reload

because options (also filters) initialized only on first run.

...

/Markus

2014-09-29 13:15 GMT+02:00 Markus Klock
<markus@best-practice.se <mailto:markus@best-practice.se>>:

    Well, might be but not according to the config examples:
    http://observium.org/wiki/Configuration_Options#Syslog_Settings

    /Markus

    2014-09-29 13:05 GMT+02:00 Peter Persson
    <peter.persson@bredband2.se
    <mailto:peter.persson@bredband2.se>>:

        I dont use this, but it might be regexp? So a "/" in
        the end?

        2014-09-29 12:46 GMT+02:00 Markus Klock
        <markus@best-practice.se <mailto:markus@best-practice.se>>:

            Hello!
            I'm trying to apply some syslog-filters and have
            for example added this to my config.php:
            $config['syslog']['filter'][] =
            'ROUTING-MLDP-5-BRANCH';
            $config['syslog']['filter'][] = "Successfully
            authenticated user \'rancid\'";

            However I still get messages containing these strings

            ​
            Do I need some kind of wildcard or what could be wrong?

            BR,
            Markus

            _______________________________________________
            observium mailing list
            observium@observium.org
            <mailto:observium@observium.org>
            http://postman.memetic.org/cgi-bin/mailman/listinfo/observium



        _______________________________________________
        observium mailing list
        observium@observium.org <mailto:observium@observium.org>
        http://postman.memetic.org/cgi-bin/mailman/listinfo/observium





_______________________________________________
observium mailing list
observium@observium.org <mailto:observium@observium.org>
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

-- 
Mike Stupalov
http://observium.org


_______________________________________________
observium mailing list
observium@observium.org <mailto:observium@observium.org>
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

-- 
Mike Stupalov
http://observium.org


_______________________________________________
observium mailing list
observium@observium.org <mailto:observium@observium.org>
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

_______________________________________________
observium mailing list
observium@observium.org <mailto:observium@observium.org>
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium