From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/610
Path: main.gmane.org!not-for-mail
From: Vladimir Smelhaus <smelhaus@bpt.cz>
Newsgroups: gmane.comp.sysutils.supervision.general
Subject: Re: svlogd config Epattern
Date: Mon, 18 Oct 2004 22:22:11 +0200
Sender: news <news@sea.gmane.org>
Message-ID: <cl18ko$bgc$1@sea.gmane.org>
References: <cks5j9$of1$1@sea.gmane.org> <20041018164556.20003.qmail@4a4c34b6e1bc9c.315fe32.mid.smarden.org>
NNTP-Posting-Host: deer.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: sea.gmane.org 1098130925 12241 80.91.229.6 (18 Oct 2004 20:22:05 GMT)
X-Complaints-To: usenet@sea.gmane.org
NNTP-Posting-Date: Mon, 18 Oct 2004 20:22:05 +0000 (UTC)
Original-X-From: supervision-return-849-gcsg-supervision=m.gmane.org@list.skarnet.org Mon Oct 18 22:21:54 2004
Return-path: <supervision-return-849-gcsg-supervision=m.gmane.org@list.skarnet.org>
Original-Received: from antah.skarnet.org ([212.85.147.14] ident=qmailr)
	by deer.gmane.org with smtp (Exim 3.35 #1 (Debian))
	id 1CJe0v-0004IC-00
	for <gcsg-supervision@gmane.org>; Mon, 18 Oct 2004 22:21:53 +0200
Original-Received: (qmail 22274 invoked by uid 76); 18 Oct 2004 20:22:14 -0000
Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm
List-Post: <mailto:supervision@list.skarnet.org>
List-Help: <mailto:supervision-help@list.skarnet.org>
List-Unsubscribe: <mailto:supervision-unsubscribe@list.skarnet.org>
List-Subscribe: <mailto:supervision-subscribe@list.skarnet.org>
List-Archive: <http://www.skarnet.org/lists/>
Original-Received: (qmail 22268 invoked from network); 18 Oct 2004 20:22:14 -0000
X-Injected-Via-Gmane: http://gmane.org/
Original-To: supervision@list.skarnet.org
Original-Lines: 25
Original-X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: gprs40-4.eurotel.cz
User-Agent: Mozilla Thunderbird 0.8 (X11/20040913)
X-Accept-Language: en-us, en
In-Reply-To: <20041018164556.20003.qmail@4a4c34b6e1bc9c.315fe32.mid.smarden.org>
Xref: main.gmane.org gmane.comp.sysutils.supervision.general:610
X-Report-Spam: http://spam.gmane.org/gmane.comp.sysutils.supervision.general:610

Gerrit Pape wrote:

>>e*.err: *
>>E*.err: First text
>>E*.err: Second text
>>
>>possible? I think that eE should work similarly as +- for logging.
> 
> I agree that it should work just like +-, each line deselected
> initially.  But currently eE lines are interpreted separately; if a
> pattern matches, the line is printed to stderr immediately, see
> svlogd(8).  Unfortunately this should not change in version 1.0.x.

It is possible to fix it up by something like this:

cat /etc/socklog/notify/run
  #!/bin/sh -e
  PIPE=/var/log/socklog/.notify
  if [ ! -p "$PIPE" ]; then mkfifo -m0620 "$PIPE"; chown log:adm "$PIPE"; fi
  exec <> "$PIPE"
  exec setuidgid log uncat -s49999 -t90 \
    sh -c 'grep -vf /etc/socklog/notify/unwanted-patterns | mail -e -s 
socklog-notify root'

Regards, Vlada