aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStefan Kangas <skangas@skangas.se>2011-03-14 17:31:51 +0100
committerStefan Kangas <skangas@skangas.se>2011-03-14 17:31:51 +0100
commit264be3f71bb48b906e9021548f2dd470747251ee (patch)
tree693e4e67282594b8d0948ad8ca1fd3d4d839f83c
parentfbd60494817a1bf5dad4d41df4f519eeeb276280 (diff)
logcheck: fixes
-rw-r--r--fripost-docs.org11
1 files changed, 5 insertions, 6 deletions
diff --git a/fripost-docs.org b/fripost-docs.org
index 7f2cb22..86dea7b 100644
--- a/fripost-docs.org
+++ b/fripost-docs.org
@@ -132,29 +132,28 @@ sudo aptitude install logcheck syslog-summary
:: /etc/logcheck/logcheck.conf
INTRO=0
- SENDMAILTO="skangas@skangas.se"
+ SENDMAILTO="admin@fripost.org"
-:: /etc/logcheck/ignore.d.server/ntp
+:: /etc/logcheck/ignore.d.server/ntp # XXX: necessary with squeeze?
- ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled) [0-9]+$
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled|status( change)?) [0-9]+$
-:: /etc/logcheck/ignore.d.server/ssh [until logcheck 1.3.7 hits stable]
+:: /etc/logcheck/ignore.d.server/ssh # not necessary with squeeze
+ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:[:xdigit:].]+: [[:digit:]]+: disconnected by user$
-:: /etc/logcheck/ignore.d.server/rsyslog [until rsyslog 4.2.0-2 hits stable]
+:: /etc/logcheck/ignore.d.server/rsyslog # not necessary with squeeze
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel:( \[[[:digit:]]+\.[[:digit:]]+\])? imklog [0-9.]+, log source = /proc/kmsg started.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] restart$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Kernel logging \(proc\) stopped.$
/etc/logcheck/ignore.d.server/ddclient
-:HIDDEN:
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ddclient\[[0-9]+\]: WARNING: file /var/cache/ddclient/ddclient.cache, line [0-9]+: Invalid Value for keyword 'ip' = ''$
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ddclient\[[0-9]+\]: WARNING: updating [._[:alnum:]-]+: nochg: No update required; unnecessary attempts to change to the current address are considered abusive$
- :END:
+
** Configuring aptitude and friends