Hi, please read the documentation about regular expressions. If you want to exclude all lines with either "gogo 1" or "gogo 2" then you have to use the regular expression "gogo [12]" in your exclude pattern. Bye, Wolfgang. -- ******************************************************************* Wolfgang Ley Enterprise Services Solaris Competence Center Wolfgang.Leyat_private Sun Microsystems GmbH Tel: +49 40 251523-0 Eiffestrasse 80 Fax: +49 40 251523-77 D-20537 Hamburg http://www.sun.de/ ------------------------------------------------------------------- > > Hi Wolfganag, > > Thank's for your help. > I thought that when a rule matches, which action is "ignore", then the > line is not processed anymore by further rule(s). > > So excluding gogo in the open "match_not_regex" seems to work. > > Now I'd like to complicate the filter. > > Let's have an input file (gaga.txt) like : > > gaga 1 > gogo 1 gaga 2 > gaga 3 gogo 2 > gaga 4 gugu 1 > gaga 5 > gaga 6 > > What I'd like is to display all lines with the word "gaga", but not those > including "gogo 1" or "gogo 2". > > Using egrep -v with a carriage return between the excluded strings works > fine : > > # egrep -v "gogo 1 > > gogo 2" gaga.txt > > displays : > > gaga 1 > gaga 4 gugu 1 > gaga 5 > gaga 6 > > Using open with the same syntax doesn't work : > > open "gaga" "gogo 1 > gogo 2" 3 0 0 "/bin/cat -" "gaga" > > I've tried > > open "gaga" "gogo 1"|"gogo 2" 3 0 0 "/bin/cat -" "gaga" > > But it doesn't work either :-( > > What should I read else ? > > Thank's again for your help and best regards ! > > _________________________ > Thierry Agassis > Unicible > > tel: +41 (0)21/644 6311 > fax: +41 (0)21/644 6300 > mailto:thierry.agassisat_private > > > > > > Wolfgang Ley - Sun Germany - Hamburg <Wolfgang.Leyat_private> > 26.10.2001 10:37 > Veuillez répondre à Wolfgang Ley - Sun Germany - Hamburg > > > Pour : loganalysisat_private, thierry.agassisat_private > cc : > Objet : Re: [logs] logsurfer help... > > > Hi, > > > Hi Everybody, > > > > I have a trivial question : > > > > Assume the following file (gaga.txt) : > > > > gogo > > gaga > > gogo gaga > > gaga gogo > > gagagaga > > gagagagagagaga > > gaga > > > > I expected that logsurfer with the following config > > > > 'gogo' - - - 0 ignore > > 'gaga' - - - open 'gaga' - 3 0 0 report "/bin/cat -" "gaga" > > ...this is a syntax error - a "0" before the "open" is missing. > > > > > > > would display (cat gaga.txt | logsurfer) : > > > > gaga > > gagagaga > > gagagagagagaga > > gaga > > > > But lines with gogo still appear :-( > > Which is correct. Your configuration first ignores all lines with > "gogo" but does react on the first "gaga". Starting with the first > "gaga" you do open a contect to collect all following lines which > to contain the word "gaga" anywhere in the line. This is due to your > action > > open 'gaga' - 3 0 0 report "/bin/cat -" "gaga" > > If you want to collect all lines with "gaga" but without "gogo", > then you have to declare this in your context, e.g. > > open 'gaga' 'gogo' 3 0 0 report "/bin/cat -" "gaga" > > > If I want to use contexts, what kind of rule should I use to log all > > logged line from a file, nut the ones with a given word ? > > The regular expression '.*' will match everything (if that was your > question). > > Bye, > Wolfgang. > -- > ******************************************************************* > Wolfgang Ley Enterprise Services > Solaris Competence Center Wolfgang.Leyat_private > Sun Microsystems GmbH Tel: +49 40 251523-0 > Eiffestrasse 80 Fax: +49 40 251523-77 > D-20537 Hamburg http://www.sun.de/ > ------------------------------------------------------------------- > > > --------------------------------------------------------------------- To unsubscribe, e-mail: loganalysis-unsubscribeat_private For additional commands, e-mail: loganalysis-helpat_private
This archive was generated by hypermail 2b30 : Mon Oct 29 2001 - 10:31:24 PST