From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/982 Path: news.gmane.org!not-for-mail From: pauld Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: Help needed on svlogd pattern match Date: Mon, 09 Jan 2006 11:35:15 +1300 Message-ID: <43C193A3.70904@cwa.co.nz> References: NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1136760023 3317 80.91.229.2 (8 Jan 2006 22:40:23 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sun, 8 Jan 2006 22:40:23 +0000 (UTC) Cc: supervision-help@list.skarnet.org, supervision@list.skarnet.org Original-X-From: supervision-return-1218-gcsg-supervision=m.gmane.org@list.skarnet.org Sun Jan 08 23:40:22 2006 Return-path: Envelope-to: gcsg-supervision@gmane.org Original-Received: from antah.skarnet.org ([212.85.147.14]) by ciao.gmane.org with smtp (Exim 4.43) id 1EvjCp-0007bR-Uh for gcsg-supervision@gmane.org; Sun, 08 Jan 2006 23:40:08 +0100 Original-Received: (qmail 4460 invoked by uid 76); 8 Jan 2006 22:40:29 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 4449 invoked from network); 8 Jan 2006 22:40:28 -0000 User-Agent: Debian Thunderbird 1.0.2 (X11/20051002) X-Accept-Language: en-us, en In-Reply-To: Xref: news.gmane.org gmane.comp.sysutils.supervision.general:982 Archived-At: Hi there, sorry to bug a whole mailing list like this, but you should know that the subscriber Paul Dorman (pauld@cwa.co.nz) is no longer here. I don't have any password to unsubscribe him from your mailing list. Please remove him if possible. Thanks Rajkumar s wrote: > Dear sir, > For a quiet sometime we had been using svlogd for log > processing, I need some help regarding matching some pattern in the > log files and that needs to be logged in seperately in another log > file. > > eg: > > timestamp rcpt:-:not valid sender > timestamp rcpt:+:valid email-id > timestamp rcpt:-:not valid recipient > > I need only the + lines ie., "timestamp rcpt:+:valid email-id" to be > logged in seperately > > The Config file is shown below > s100000 > n5 > -* > +rcpt:+* > > But this doesn't work , Kindly help me out to log messages seperately. > > Regards, > S>Rajkumar