Re: [logs] logsurfer help...

From: Wolfgang Ley - Sun Germany - Hamburg (Wolfgang.Leyat_private)
Date: Fri Oct 26 2001 - 01:37:19 PDT

  • Next message: Alek Goszczycki: "Re: [logs] Best software between : swatch, logsurfer and wots ?"

    Hi,
     
    > Hi Everybody,
    > 
    > I have a trivial question :
    > 
    > Assume the following file (gaga.txt) :
    > 
    > gogo
    > gaga
    > gogo gaga
    > gaga gogo
    > gagagaga
    > gagagagagagaga
    > gaga
    > 
    > I expected that logsurfer with the following config
    > 
    > 'gogo' - - - 0 ignore
    > 'gaga' - - - open 'gaga' - 3 0 0 report "/bin/cat -" "gaga"
    
    ...this is a syntax error - a "0" before the "open" is missing.
    
    > 
    > 
    > would display (cat gaga.txt | logsurfer) :
    > 
    > gaga
    > gagagaga
    > gagagagagagaga
    > gaga
    > 
    > But lines with gogo still appear  :-(
    
    Which is correct. Your configuration first ignores all lines with
    "gogo" but does react on the first "gaga". Starting with the first
    "gaga" you do open a contect to collect all following lines which
    to contain the word "gaga" anywhere in the line. This is due to your
    action
    
       open 'gaga' - 3 0 0 report "/bin/cat -" "gaga"
    
    If you want to collect all lines with "gaga" but without "gogo",
    then you have to declare this in your context, e.g.
    
       open 'gaga' 'gogo' 3 0 0 report "/bin/cat -" "gaga"
    
    > If I want to use contexts, what kind of rule should I use to log all 
    > logged line from a file, nut the ones with a given word ?
    
    The regular expression '.*' will match everything (if that was your
    question).
    
    Bye,
      Wolfgang.
    -- 
    *******************************************************************
    Wolfgang Ley                           Enterprise Services
    Solaris Competence Center              Wolfgang.Leyat_private
    Sun Microsystems GmbH                  Tel: +49 40 251523-0
    Eiffestrasse 80                        Fax: +49 40 251523-77
    D-20537 Hamburg                        http://www.sun.de/
    -------------------------------------------------------------------
    
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Fri Oct 26 2001 - 09:36:57 PDT