From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/959 Path: news.gmane.org!not-for-mail From: Rajkumar s Newsgroups: gmane.comp.sysutils.supervision.general Subject: Help needed on svlogd pattern match Date: Mon, 19 Dec 2005 10:29:50 +0530 Message-ID: NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: sea.gmane.org 1134968459 1040 80.91.229.2 (19 Dec 2005 05:00:59 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 19 Dec 2005 05:00:59 +0000 (UTC) Original-X-From: supervision-return-1195-gcsg-supervision=m.gmane.org@list.skarnet.org Mon Dec 19 06:00:57 2005 Return-path: Original-Received: from antah.skarnet.org ([212.85.147.14]) by ciao.gmane.org with smtp (Exim 4.43) id 1EoD7o-0005Us-PW for gcsg-supervision@gmane.org; Mon, 19 Dec 2005 05:59:53 +0100 Original-Received: (qmail 7499 invoked by uid 76); 19 Dec 2005 05:00:13 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 7489 invoked from network); 19 Dec 2005 05:00:13 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=i2Aut2yVrBvUAb0TIr0ZkmQzfjFaxsDcA2+uRBttQ7nmxwV8vrRMVepDZ8bBNdHe07hIp0N5JkiuK1V9cd3StYViWseqFXC4q2EFY8QXPnm4ynNI6U4jx7Uqxrxch17jhLsHjHp1d5fXxsaUc52RF5Px1r392siz0Hdvx+gNwlU= Original-To: supervision-help@list.skarnet.org, supervision@list.skarnet.org Content-Disposition: inline Xref: news.gmane.org gmane.comp.sysutils.supervision.general:959 Archived-At: Dear sir, For a quiet sometime we had been using svlogd for log processing, I need some help regarding matching some pattern in the log files and that needs to be logged in seperately in another log file. eg: timestamp rcpt:-:not valid sender timestamp rcpt:+:valid email-id timestamp rcpt:-:not valid recipient I need only the + lines ie., "timestamp rcpt:+:valid email-id" to be logged in seperately The Config file is shown below s100000 n5 -* +rcpt:+* But this doesn't work , Kindly help me out to log messages seperately. Regards, S>Rajkumar