From 849d15894c9c67b0040435f1433b2816e2418334 Mon Sep 17 00:00:00 2001 From: Stefan Kangas Date: Sat, 3 Sep 2011 06:07:36 +0200 Subject: Add rsyslog logchecker rule --- fripost-docs.org | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fripost-docs.org b/fripost-docs.org index 8bd0226..70d9d32 100644 --- a/fripost-docs.org +++ b/fripost-docs.org @@ -130,6 +130,10 @@ sudo aptitude install logcheck syslog-summary INTRO=0 SENDMAILTO="admin@fripost.org" +:: /etc/logcheck/ignore.d.server/rsyslog # XXX: not always necessary? + + + ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] rsyslogd was HUPed, type '(restart|lightweight)'\.$ + :: /etc/logcheck/ignore.d.server/ntp # XXX: necessary with squeeze? - ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|enabled) [0-9]+$ -- cgit v1.2.3