2

When I receive kernel traces in my logs, the last line is empty. I'd like to filter/ignore these empty kernel messages using syslog-ng and patterndb. Here is the pattern I have so far that is not matching empty:

 <rule class='system' id='kernel_empty' provider='local'> <description></description> <patterns> <pattern></pattern> </patterns> </rule>

How do I exclude these empty kernel messages?

Improve this question

1 Answer 1

Reset to default
0

try to add an empty line (or a line-break) to the pattern. For example, 

<patterns> <pattern> </pattern> </patterns>
Improve this answer
1
  • You'll have to wrap XML tags in a {code} block, or the system will hide it :) Commented Dec 21, 2011 at 13:45

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.