gistfile1.java

import org.graylog2.plugin.Message

rule "Drop vmware guest crap"
    when
        m : Message( getField("full_message") matches "\\[ warning\\] \\[vmusr:vmusr\\] Error in the RPC receive loop: RpcIn(.|\r|\n)*" );
    then
        m.setFilterOut(true);
        #System.out.println( "[DROOL] : " + m.toString() ); # too verbose crap...
end

rule "Drop ESX cosmetic crap"
    when
        m : Message( getField("message") matches "Hostd.*Unable.to.parse.(Min|Max)Ram(PerCpu)?.value(.|\r|\n)*" )
    then
        m.setFilterOut(true);
        #System.out.println( "[DROOL] : " + m.toString() );
end

rule "Drop hostd spam"
    when
        m : Message( getField("message") matches ".*Malformed.guest.uptime.string(.|\r|\n)*" )
    then
        m.setFilterOut(true);
end

rule "Drop Vpxa crap 01"
    when
        m : Message( getField("message") matches ".*error.*VpxaClientAdapter..InvokeCommon.*throwing.*vmodl.fault.ManagedObjectNotFound.*received.while.invoking.moveInto.on.vim.ResourcePool(.|\r|\n)*" )
    then
        m.setFilterOut(true);
end

rule "Drop Vpxa crap 02"
    when
        m : Message( getField("message") matches "Vpxa:.*error.*(HostsvcPlugin|ResourcePool|VpxaHalResourcePoolvpxavpxaVmomi).*ProcessOps.*VmMoveSpec.*moveto.resgroup.*FAILURE.*ManagedObjectNotFound(.|\r|\n)*" )
    then
        m.setFilterOut(true);
end

rule "Drop Vpxa crap 03"
    when
        m : Message( getField("message") matches "Vpxa.*error.*(VpxaHalResourcePool|vpxavpxaVmomi).*ProcessOps.*UpdateSpec.*FAILURE.*ManagedObjectNotFound(.|\r|\n)*" )
    then
        m.setFilterOut(true);
end
rule "Drop Vpxa crap 04"
    when
        m : Message( getField("message") matches "Vpxa.*error.*(vpxavpxaVmomi).*Re-throwing method-fault.*vmodl.fault.ManagedObjectNotFound.*while.invoking.updateConfig.on.vim.ResourcePool.resgroup(.|\r|\n)*" )
    then
        m.setFilterOut(true);
end