[Check_mk (english)] Regex pattern not working

Hello Team,

In location: /opt/omd/sites/my_site/etc/check_mk/conf.d

I created file called ignore.mk with content:

logwatch_rules = [

( {‘reclassify_patterns’: [(‘I’, u’.segfault.’, u’’)]}, [], ALL_HOSTS, ALL_SERVICES, {‘description’: u’Exclude_segfaultv2’} ),

] + logwatch_rules

Syntax should be good, since I created it via WATO, and then copied the syntax, and removed in WATO.

But it seems not working, because today I received Critical message, which should be ignored according to this rule:

CRIT - 10 CRIT messages (Last worst: “May 8 13:36:43 med0509 kernel: tabix[113731]: segfault at 44 ip 00000000004045a7 sp 00007ffff179c260 error 4 in tabix[400000+7c000]”)

I have few other rules, and they seem to be working correctly. Can someone help me investigating this ?

Are there any logs created by check_mk where he for example says “Message X received, according to rule Y it has been re-clasified to Z” ?

Thanks,

Jakub