From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/965
Path: news.gmane.org!not-for-mail
From: Rajkumar s <rajkumars910@gmail.com>
Newsgroups: gmane.comp.sysutils.supervision.general
Subject: Re: Help needed on svlogd pattern match
Date: Thu, 29 Dec 2005 16:47:36 +0530
Message-ID: <e69cdf2f0512290317w22ddae1ai4e906aaf7c3bc903@mail.gmail.com>
References: <e69cdf2f0512182059p21265f15t8f0cf40eca879cca@mail.gmail.com>
	 <20051219092758.29772.qmail@d6b977da400810.315fe32.mid.smarden.org>
NNTP-Posting-Host: main.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Trace: sea.gmane.org 1135855068 28786 80.91.229.2 (29 Dec 2005 11:17:48 GMT)
X-Complaints-To: usenet@sea.gmane.org
NNTP-Posting-Date: Thu, 29 Dec 2005 11:17:48 +0000 (UTC)
Original-X-From: supervision-return-1201-gcsg-supervision=m.gmane.org@list.skarnet.org Thu Dec 29 12:17:48 2005
Return-path: <supervision-return-1201-gcsg-supervision=m.gmane.org@list.skarnet.org>
Envelope-to: gcsg-supervision@gmane.org
Original-Received: from antah.skarnet.org ([212.85.147.14])
	by ciao.gmane.org with smtp (Exim 4.43)
	id 1Ervmv-00052R-GD
	for gcsg-supervision@gmane.org; Thu, 29 Dec 2005 12:17:42 +0100
Original-Received: (qmail 25924 invoked by uid 76); 29 Dec 2005 11:18:01 -0000
Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm
List-Post: <mailto:supervision@list.skarnet.org>
List-Help: <mailto:supervision-help@list.skarnet.org>
List-Unsubscribe: <mailto:supervision-unsubscribe@list.skarnet.org>
List-Subscribe: <mailto:supervision-subscribe@list.skarnet.org>
List-Archive: <http://www.skarnet.org/lists/>
Original-Received: (qmail 25918 invoked from network); 29 Dec 2005 11:18:01 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=hmNugrLMuVrgDB+k8qT7STs7uu4Xjucnj0SIymDqYyCzYO1qVkn40xZd/kgu8xzrkFEu7WgxJcL3+NCJp1uC52p5QVCenLeTT9AXRcP5JGPtwLa0FTIyELOsfGUJrx+l9JeuhQG77ppKx1bn4xCJQ1CZNxdA9uMmmifxYvnD1eM=
Original-To: supervision@list.skarnet.org
In-Reply-To: <20051219092758.29772.qmail@d6b977da400810.315fe32.mid.smarden.org>
Content-Disposition: inline
Xref: news.gmane.org gmane.comp.sysutils.supervision.general:965
Archived-At: <http://permalink.gmane.org/gmane.comp.sysutils.supervision.general/965>

Dear sir,
       Thanks a lot it worked for me after substituted '++' instead of  '+'

Thanks and Regards,
S>Rajkumar

On 12/19/05, Gerrit Pape <pape@smarden.org> wrote:
> On Mon, Dec 19, 2005 at 10:29:50AM +0530, Rajkumar s wrote:
> >          For a quiet sometime we had been using svlogd for log
> > processing, I need some help regarding matching some pattern in the
> > log files and that needs to be logged in seperately in another log
> > file.
> >
> > eg:
> >
> > timestamp rcpt:-:not valid sender
> > timestamp rcpt:+:valid email-id
> > timestamp rcpt:-:not valid recipient
> >
> > I need only the + lines ie., "timestamp rcpt:+:valid email-id" to be
> > logged in seperately
> >
> > The Config file is shown below
> > s100000
> > n5
> > -*
> > +rcpt:+*
> >
> > But this doesn't work , Kindly help me out to log messages seperately.
>
> A plus in the pattern has a special meaning with svlogd, see the man
> page.  You cannot match a single plus character, only one or more.  This
> pattern should work:
>
>  $ mkdir foo
>  $ echo 'ercpt:++:*' >foo/config
>  $ svlogd -tt foo <<EOT
>  rcpt:-:not valid recipient
>  rcpt:+:valid email-id
>  EOT
>  2005-12-19_09:27:29.02106 rcpt:+:valid email-id
>  $ cat foo/current
>  2005-12-19_09:27:29.02102 rcpt:-:not valid recipient
>  2005-12-19_09:27:29.02106 rcpt:+:valid email-id
>  $
>
> Regards, Gerrit.
>