Have you tried: ignore /trutwijd/ On Tue, 2004-05-04 at 12:56, Josh Trutwin wrote: > Ok, > > I have an apache error log that I want to put under swatch log monitoring, basically I want to get an email any time there is an error and I am not logged in under http authentication (my username is trutwijd). So I want a regex like: > > match on: /Anything that doesn't contain "trutwijd"/ > > I tried these: > > watchfor /^trutwijd/ > watchfor /.*^trutwijd.*/ > > But neither works, they seem to not match anything. > > This should match: > > [Tue May 04 11:38:25 2004] [error] [client 64.83.223.150] user tclug: authentication failure for "/private": Password Mismatch > > This should not (because it's just me after all): > > [Tue May 04 11:38:25 2004] [error] [client 64.83.223.150] user trutwijd: authentication failure for "/private": Password Mismatch > > Any suggestions, > > Josh > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list