Difference between revisions of "Multitail"

From WTFwiki
Jump to navigation Jump to search
(ntsyslog addition for multitail)
(woops -- add 'error' line for ntsyslog multitail scheme)
Line 24: Line 24:
 
   cs_re_s:yellow:...\[(warning)\]
 
   cs_re_s:yellow:...\[(warning)\]
 
   cs_re_s:red:...\[(failure)\]
 
   cs_re_s:red:...\[(failure)\]
 +
  cs_re_s:red:...\[(error)\]

Revision as of 22:36, 18 January 2007

Multitail Color Schemes

pflog

 # multitail -cS pflog -l 'tcpdump -n -s0 -i pflog0'
 colorscheme:pflog:pflog
 cs_re:cyan:^[0-9][0-9]:[0-9][0-9]:[0-9][0-9]\.[0-9]+\
 cs_re:green:[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
 cs_re_s:yellow:....(\.[0-9]+):\
 cs_re_s:yellow:....(\.[0-9]+\ )
 cs_re_s:magenta::\ (.*),\
 cs_re:red:\ [SRPF]\
 cs_re_s:red:length\: (.*)$


ntsyslog

 #
 # Windows (NTsyslog)
 colorscheme:ntsyslog:Windows NTsyslog
 cs_re:cyan:^[A-Z][a-z][a-z]\ [0-9][0-9]\ [0-9][0-9]:[0-9][0-9]:[0-9][0-9]\
 cs_re_s:magenta:...:[0-9][0-9]\ ([A-Za-z]+)
 cs_re_s:green:...\[(info)\]
 cs_re_s:yellow:...\[(warning)\]
 cs_re_s:red:...\[(failure)\]
 cs_re_s:red:...\[(error)\]