the-nine-worlds/ansible-edda
the-nine-worlds/ansible-edda
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Update logcheck ignores

Browse Source
This commit is contained in:
Wojciech Kozlowski 2023-11-06 05:37:12 +01:00
parent 0777eabb99
commit 2603efe2bc
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
playbooks/files/system/base/logs/all
View File

@ -1,6 +1,8 @@
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ fstrim\[[0-9]+\]: [-_/[:alnum:]]+: [.[:digit:]]+ (M|G)iB \([[:digit:]]+ bytes\) trimmed on [-_/[:alnum:]]+$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ fstrim\[[0-9]+\]: [-_/[:alnum:]]+: [.[:digit:]]+ ((M|G)i)?B \([[:digit:]]+ bytes\) trimmed on [-_/[:alnum:]]+$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Starting|Stopping) [ +[:alnum:]/\-]+\.(\.\.)?$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: Finished (Cleanup of Temporary Directories|Online ext4 Metadata Check for All Filesystems|Discard unused blocks on filesystems from /etc/fstab)\.$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: (apt-daily\.service|apt-daily-upgrade\.service|logrotate\.service|man-db\.service): Consumed ([0-9]{1,2}min )?[0-9]{1,2}\.[0-9]{3}s CPU time\.$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd\[[0-9]+\]: rsyslog\.service: Sent signal SIGHUP to main process [[:digit:]]+ \(rsyslogd\) on client request\.$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd-journald\[[0-9]+\]: Data hash table of /var/log/journal/[[:alnum:]]+/system\.journal has a fill level at [0-9]+\.[0-9+]+ \([0-9]+ of [0-9]+ items, [0-9]+ file size, [0-9]+ bytes per hash table item\), suggesting rotation\.$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ systemd-journald\[[0-9]+\]: /var/log/journal/[[:alnum:]]+/system\.journal: Journal header limits reached or header out-of-date, rotating\.$
^([[:alpha:]]{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]\-]+ rsyslogd(\[[0-9]+\])?: \[origin software="rsyslogd" swVersion="[0-9]+\.[0-9]+\.[0-9]+" x-pid="[0-9]+" x-info="https:\/\/www\.rsyslog\.com"\] rsyslogd was HUPed$