I've got a syslog message where there is a bunch of stuff I don't care a bout at the beginning of the messeage. The end part is what I care about. Is there a way to put a wild card entry in to exclude the first part, but not the second part?
Everything before the colon is unimportant:
Nov 19 16:17:38 opchmon0001 %OrionAlertEngine: blu-c01-trd-csw02 is Down
Thanks in advance for looking at my question,
Pete