[Logcheck-devel] Re: How to ignore hddtemp lines that contain octal \200?

Adam Funk a24061 at ducksburg.com
Sat Apr 28 19:10:00 UTC 2007


On 2007-04-25, Adam Funk wrote:

> Since I upgraded from Ubuntu Edgy to Feisty, hddtemp's output to
> syslog has ended in "^P?: 34 C" (for example), where the ? represents
> octal \200, so hddtemp always shows up in logcheck's output; ".*"
> won't match it.  I've tried copying and pasting the funny character
> from syslog into the ignore pattern, and I still can't suppress this.

Following the documentation's suggestion to use egrep, I've worked out
that 

$ egrep $'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$' /var/log/syslog

shows the lines I want logcheck to ignore.  But the line

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*\x80:.*$

in the ignore file isn't working.

What is the trick to getting logcheck to handle encoded hex values
correctly?

Thanks,
Adam





More information about the Logcheck-devel mailing list