Try http://regexpal.com/ which gives instant feedback on your regex and sample data. Tim. On 11 May 2012 09:49, Barry Samuels <bjsamuels@beenthere-donethat.org.uk> wrote:

I have to admit that apart from the simplest expressions I don't understand regex.

I want to set up a logcheck ignore expression to ignore the following:

kernel: [220359.596744] [drm] nouveau 0000:06:00.0: Setting dpms mode 0 on tmds encoder (output 2)

The 220359.596744 number varies and so does the single mode digit, 0 in this instance, but the rest doesn't change.

I have tried by copying some expressions parrot fashion but can't get it to work.

Any help would be appreciated.

-- Barry Samuels http://www.beenthere-donethat.org.uk The Unofficial Guide to Great Britain

_______________________________________________ main@lists.alug.org.uk http://www.alug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe?  See message headers or the web site above!

On 11/05/12 09:49, Barry Samuels wrote:

I want to set up a logcheck ignore expression to ignore the following:

kernel: [220359.596744] [drm] nouveau 0000:06:00.0: Setting dpms mode 0 on tmds encoder (output 2)

The 220359.596744 number varies and so does the single mode digit, 0 in this instance, but the rest doesn't change.

I found the following documentation helpful: http://www.agentbob.info/agentbob/g3/83-AB.html .. albeit useless without knowing regexs. But without a logcheck install to test with, I'd guess at a rule along the lines of: ^kernel: \[[0-9\.]{13}\] \[drm\] [[:almun:]]+ [0-9:\.]{12}: Setting dpms mode Reading left to right: ^kernel: = start of line (^) followed by the text "kernel: " \[ = open square bracket, escaped because [ means something in a regex [0-9\.]{13} = anything in the square brackets (in this case digits 0 to 9 or ".", again escaped because "." has special meaning), 13 of them (to match 220359.596744) \] \[drm\] = matches "] [drm] " [[:alnum:]]+ = matches one or more ("+") alphanumerics (to pick up "nouveau" - I could have just put "nouveau" directly but doing it this way would match a different driver too, provided it just used alphanumerics anyway!) [9-9:\.]{12} = 12 of the characters in the square brackets to match 0000:06:00.0 : Setting dpms mode = direct text match As I didn't restrict the match to the full line (by ending the regex with $ to match end of line), the expression doesn't care what happens after that. Of-course the trick with these things is only to exclude the ones you want to lose without catching others that you want. So if you wanted to literally only match the lines you describe it would be simpler: ^kernel: \[[0-9\.]{13}\] \[drm\] noveau 0000:06:00.0: Setting dpms mode [0-9]+ on tmds encoder \(output 2\)$ With a bit of luck those should get you started, and like I said at the start they're untested. Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER