Adam Funk
2007-Apr-25 15:43 UTC
[Logcheck-devel] How to ignore hddtemp lines that contain octal \200?
Since I upgraded from Ubuntu Edgy to Feisty, hddtemp's output to syslog has ended in "^P?: 34 C" (for example), where the ? represents octal \200, so hddtemp always shows up in logcheck's output; ".*" won't match it. I've tried copying and pasting the funny character from syslog into the ignore pattern, and I still can't suppress this. Any ideas?
Adam Funk
2007-Apr-28 19:10 UTC
[Logcheck-devel] Re: How to ignore hddtemp lines that contain octal \200?
On 2007-04-25, Adam Funk wrote:> Since I upgraded from Ubuntu Edgy to Feisty, hddtemp's output to > syslog has ended in "^P?: 34 C" (for example), where the ? represents > octal \200, so hddtemp always shows up in logcheck's output; ".*" > won't match it. I've tried copying and pasting the funny character > from syslog into the ignore pattern, and I still can't suppress this.Following the documentation's suggestion to use egrep, I've worked out that $ egrep $'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$' /var/log/syslog shows the lines I want logcheck to ignore. But the line ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$ in the ignore file isn't working. What is the trick to getting logcheck to handle encoded hex values correctly? Thanks, Adam