Adam Funk
2007-May-04  16:38 UTC
[Logcheck-users] How to ignore hddtemp lines that contain 0x80 character?
Since I upgraded from Ubuntu Edgy to Feisty, hddtemp's output to
syslog has ended in "^P?: 34 C" (for example), where the ? represents
a funny character (octal 200, hex 80) that ".*" doesn't match, so
hddtemp always shows up in logcheck's output.  I've tried copying and
pasting the funny character from syslog into the ignore pattern, and I
still can't suppress this.
Following the documentation's suggestion to use egrep, I've worked out
that 
$ egrep $'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$'
/var/log/syslog
shows the lines I want logcheck to ignore.  But the line
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$
in the ignore file isn't working.
What is the trick to getting logcheck to handle encoded hex values
correctly?
[Apologies for the duplication!  I posted this to the
 gmane.comp.log.logcheck group recently, then discovered that's the
 logcheck-devel list and logcheck-users is here.]
Thanks,
Adam