In message #2 in the thread titled Parsing a $VARIABLE within a script
in the forum titled Shell Programming and Scripting, you said:
but in the last message you show that $EVENTMSG is Wed 03 Oct, 2012 - 08:58:02 - Device lp-webtactst01.c.utah.com of type Host_Device is no longer responding to primary management requests (e.g. SNMP), but appears to be responsive to other communication protocol (e.g. ICMP). This condition has persisted for an extended amount of time. An alarm will be generated. (event [0x00010daa]) which, of course, contains neither "ModelType=" nor "ModelName=". So, I have to conclude that despite the fact that all of the threads you have started in this forum seem related, I can't rely on statements made in one thread being of any help in any other thread. Nonetheless, this and other comments about event message formats in other threads are the only specifications I have for the format of an event message.

So, back to the issues at hand. In the first message in this thread you said that the commands:

Code:

TST=$(echo "$EVENTMSG" | sed -ne 's/.*odelName=(\w+[^.]+)/\1/p')
echo "Non-FQDN Name:    " $TST

gave you the diagnostic message:

Code:

sed: -e expression #1, char 28: invalid reference \1 on `s' command's RHS

when you were expecting the output:

Code:

Non-FQDN Name: twa-casql01

As noted earlier, the diagnostic message came about because the replacement in your sed substitute command referenced subexpression 1 in the search pattern, but you didn't have any subexpressions in your search pattern. Now that you have actually shown us in message #4 in this thread what is in $EVENTMSG, we also now know that the string being searched doesn't contain the requested pattern (i.e., "odelName" doesn't appear anywhere in $EVENTMSG). To get the output you want from the value of $EVENTMSG you have supplied, the following commands will work:

Code:

TST=$(echo "$EVENTMSG" | sed -ne 's/.* Device \([^. ]*\).*/\1/p')
echo "Non-FQDN Name:     $TST"

or, without using sed:

Code:

TST=${EVENTMSG#* Device }
TST=${TST%%[. ]*}
echo "Non-FQDN Name:     $TST"

Note that the bracket expression identifying the end of the Device name is looking for <period> or <space> to end the matched name. This is because in some of your earlier posts you said that sometimes the name contained one or more <period>s (and, if so, you wanted them to be removed) and sometimes did not contain a <period>. Either of the above methods of setting $TST will terminate the string to be returned at the first <period> or <space>.

I hope this resolves this problem for you,
Don