Are regular expressions allowed in the (parameter) feild of a trigger?
example:
I set up the log monitoring and wish to set a trigger for the logs that would monitor and alert on a disk i/o error, I can do this with egrep and I do know i need 2 strings in this trigger:
egrep "sd.: I/O error:|hd.: I/O error:" messages
the first would be something like:
{Unix_t:log[/var/log/messages].str(Regular expression #1)}=1 | {Unix_t:log[/var/log/messages].str(Regular expression #2)}=1
is this possible ?
example:
I set up the log monitoring and wish to set a trigger for the logs that would monitor and alert on a disk i/o error, I can do this with egrep and I do know i need 2 strings in this trigger:
egrep "sd.: I/O error:|hd.: I/O error:" messages
the first would be something like:
{Unix_t:log[/var/log/messages].str(Regular expression #1)}=1 | {Unix_t:log[/var/log/messages].str(Regular expression #2)}=1
is this possible ?
Comment