
# This is intended to give us a count of the different messages we see

# Tell me about new DHCP acceptances
# The hideous regexp below masks out this:
# 11,05/28/09,03:29:50

# Is the closing ] not a metacharacter?
report ^DHCP\[.+?](.+?) \d\d,(\d\d\/\d\d\/\d\d,\d\d:\d\d:\d\d,)Renew
dhcp ^DHCP\[.+?](c:.+?\.log) .*?,Assign
dhcp ^DHCP\[.+?](c:.+?\.log) .*?,Conflict

# Collapse other DHCP notifications
mail ^DHCP\[.+?](.+?)\d\d,(.*)

# Tell me about backup stuff, breaking at the first linebreak if there is one
errors ^ntbackup\[error] 
report ^ntbackup.+?(#177.*)
report ^ntbackup


# I never want to see a security[success] message again
trash ^security\[success] \d+ (.*)

# Tell me about security risks
critical ^symantec antivirus\[error] 

# Gah. Symantec puts its "security risks" in application popups. 
# Double gah. Line noise!
critical ^application popup\[info] 26 (Application popup: .*?)Alert: Virus Found(.*?)Computer: .+?(\#177)User: .+?(\#177)Virus: .+?(\#177\#177)File Path: .+?(\#177)Requested Action: .+?(\#177)Date:.+?(\#177)Time:.+?(\#177.*)


# I think this should catch other Symantec Antivirus stuff, if there 
# is any 
critical ^application popup\[info] 26 Application popup: Alerting System Notification

# Collapse msexchange stuff
mail msexchange.+?\[.+?] \d+ (.*)


# Shut up about other messages
mail ^symantec antivirus\[.+?] \d+ (.*)

# Shut up about printer messages
mail ^print\[.+?] \d+ (.*)
mail termservdevices[error] 1111 (.*)

# Collect errors with some information 
errors ^.*?\[error] 

# Tell me a little bit of information about other messages (dumb?)
mail ^.*?\[.+?] \d+ .............................................(.*)
