SWATCH++(8)

NAME
swatch++ - SOS's log watcher

SYNOPSIS
swatch++ [ -c <conffile> ] [ -dfhnvV ] [ <file> ] [ <file>... ]

DESCRIPTION
swatch++ is designed to monitor syslog logs. It requires a configuration file which details the regular expressions to be watched for, the threshholds and rate limitations, and the actions to be taken.

OPTIONS

-d  turn on debugging. Mostly for swatch++ hackers, not configuration file debugging.

-f  Follow one file (ala tail -f ). There should be exactly one filename specified which will be followed. All future output into that file will be looked at (e.g. it will not parse data already in the file)

-h  Print usage message.

-n  Show what actions would be taken instead of executing them.

-v  Verbose output (print information about each match, even if no actions are taken).

-V  Print version number

-c <configfile>
    Use an alternate configuration file than the default (/etc/swatch++.conf)

SIGNALS
Swatch++ understands two signals:

SIGHUP
    If in follow mode, check to see if the log file has been switched underneath us (i.e. by the nightly log rotation, for example).

SIGUSR1
    Reload the configuration file (also resets all history of previous matches or actions)

FILES
/etc/swatch++.conf Default Swatch++ configuration file.

SEE ALSO
syslogd(8) swatch++.conf(5) swatch(8) swatch(5) perl5(1)

BUGS
Syntax error messages about problems in the configuration file are less than perfect.