SF.net SVN: logwatch:[73] scripts/services/evtsystem

[email protected]
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>
Revision: 73
          http://logwatch.svn.sourceforge.net/logwatch/?rev=73&view=rev
Author:   opoplawski
Date:     2011-11-18 20:31:09 +0000 (Fri, 18 Nov 2011)
Log Message:
-----------
More System Event messages to output only in high detail

Modified Paths:
--------------
    scripts/services/evtsystem

Modified: scripts/services/evtsystem
===================================================================
--- scripts/services/evtsystem	2011-11-18 16:59:38 UTC (rev 72)
+++ scripts/services/evtsystem	2011-11-18 20:31:09 UTC (rev 73)
@@ -60,8 +60,34 @@
       next if $ExpandedString =~ /Microsoft \(R\) Windows \(R\) \d+\.\d+\. \d+ Service Pack \d/;
       next if $ExpandedString =~ /The Event log service was started./;
       next if $ExpandedString =~ /The Event log service was stopped./;
+      next if $ExpandedString =~ /The system uptime is \d+ seconds/;
    }
 
+   if ($System =~ /Microsoft-Windows-Kernel-Power/) {
+      #High Detail
+      next if $ExpandedString =~ /The system is entering sleep/ and $Detail < 10;
+   }
+
+   if ($System =~ /Microsoft-Windows-Power-Troubleshooter/) {
+      #High Detail
+      next if $ExpandedString =~ /The system has resumed from sleep/ and $Detail < 10;
+   }
+
+   if ($System =~ /Microsoft-Windows-Time-Service/) {
+      #High Detail
+      next if $ExpandedString =~ /The time provider NtpClient is currently receiving valid time data from/ and $Detail < 10;
+   }
+
+   if ($System =~ /Microsoft-Windows-Winlogon/) {
+      #High Detail
+      next if $ExpandedString =~ /User \w+ Notification for Customer Experience Improvement Program/ and $Detail < 10;
+   }
+
+   if ($System =~ /Virtual Disk Service/) {
+      #High Detail
+      next if $ExpandedString =~ /Service (started|stopped)/ and $Detail < 10;
+   }
+
    if ($System =~ /Service Control Manager/) {
       #Ignore these
       next if $ExpandedString =~ /The (.*) service entered the running state./;

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.