Stuart,
It looks like you left the "i" or of "fci";   didn't you intend to enter "grep -e fci.device syslog"?

Cheers,
Neal Jones

From:	Stuart Kendrick <skendric@fhcrc.org>
To:	"toasters@teaparty.net" <toasters@teaparty.net>
Date:	01/29/2012 10:07 AM
Subject:	EMS Events in syslog
Sent by:	toasters-bounces@teaparty.net

---

Some EMS Events show up in syslog:

cf.fm.takeoverComplete:WARN             10Jan2012 12:58:22        
cf.fsm.releasingReservations:INFO        10Jan2012 12:58:24

loghost> grep -e cf.fm.takeoverComplete -e cf.fsm.releasingReservations
syslog
Jan 10 12:58:22 toaster-b-svif1 [toaster-b (takeover):
cf.fm.takeoverComplete:warning]: Cluster monitor: takeover completed
Jan 10 12:58:24 toaster-b-svif1 [toaster-b (takeover):
cf.fsm.releasingReservations:info]: Cluster monitor: Releasing disk
reservations in preparation for giveback


But others do not:

fci.device.timeout:ERR                   10Jan2012 12:52:36
fci.device.quiesce:INFO                  10Jan2012 13:00:16

loghost> grep -e fc.device syslog
loghost>

syslog.conf:
*.info                    /etc/messages
*.info                    @loghost.company.com


In fact, examining my toaster logs for the last two years:
loghost> ls 20*
toaster-logs-from-2010.txt
toaster-logs-from-2011.txt
loghost> grep cf.fm.takeover  toaster-logs-from* | wc -l
70
loghost> grep fc.device toaster-logs-from-* | wc -l
0
loghost>

How do I persuade EMS to send /everything/ to syslog?

--sk

Stuart Kendrick
FHCRC
_______________________________________________
Toasters mailing list
Toasters@teaparty.net
http://www.teaparty.net/mailman/listinfo/toasters