Re: svlogd config Epattern

[Vladimir Smelhaus <smelhaus@bpt.cz>]

Gerrit Pape wrote:

>>e*.err: *
>>E*.err: First text
>>E*.err: Second text
>>
>>possible? I think that eE should work similarly as +- for logging.
> 
> I agree that it should work just like +-, each line deselected
> initially.  But currently eE lines are interpreted separately; if a
> pattern matches, the line is printed to stderr immediately, see
> svlogd(8).  Unfortunately this should not change in version 1.0.x.

It is possible to fix it up by something like this:

cat /etc/socklog/notify/run
  #!/bin/sh -e
  PIPE=/var/log/socklog/.notify
  if [ ! -p "$PIPE" ]; then mkfifo -m0620 "$PIPE"; chown log:adm "$PIPE"; fi
  exec <> "$PIPE"
  exec setuidgid log uncat -s49999 -t90 \
    sh -c 'grep -vf /etc/socklog/notify/unwanted-patterns | mail -e -s 
socklog-notify root'

Regards, Vlada