the-nine-worlds/ansible-edda
the-nine-worlds/ansible-edda
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Fix logcheck ignores

Browse Source
This commit is contained in:
Wojciech Kozlowski 2023-05-10 21:52:50 +02:00
parent f01dcd9bfb
commit f3b2b7024a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
playbooks/files/system/base/logs/asgard
View File

@ -1,6 +1,6 @@
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: Finished (Podman auto-update service|Pod service auto-update service|Prune dangling podman images)\.$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: rsyslog\.service: Sent signal SIGHUP to main process [[:digit:]]+ (rsyslogd) on client request\.$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: var-lib-containers-storage-overlay\.mount: Succeeded\.$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ podman\[[0-9]+\]: [-[:digit:]]{10} [.:[:digit:]]{8,18} \+0100 CET m=\+[.[:digit:]]{1,11} image pull$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ podman\[[0-9]+\]: [-[:digit:]]{10} [.:[:digit:]]{8,18} \+[[:digit:]]{4} [[:alpha:]]{3,4} m=\+[.[:digit:]]{1,11} image pull$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ podman\[[0-9]+\]: [-[:digit:]]{10} [.:[:digit:]]{8,18} \+0100 CET m=\+[.[:digit:]]{1,11} image remove [[:alnum:]]+$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ kernel: \[[0-9]+\.[0-9]+\] audit: type=1326 audit\([.:0-9]+\): auid=[0-9]+ uid=[0-9]+ gid=[0-9]+ ses=[0-9]+ subj=unconfined pid=[0-9]+ (comm="git-remote-http" exe="/usr/libexec/git-core/git-remote-http"|comm="git-remote-http" exe="/usr/libexec/git-core/git-remote-https"|comm="gitea" exe="/app/gitea/gitea"|comm="git" exe="/usr/libexec/git-core/git"|comm="git-receive-pac" exe="/usr/bin/git-receive-pack") sig=0 arch=c000003e syscall=324 compat=0 ip=[[:alnum:]]+ code=0x50000$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ kernel: \[\s[0-9]+\.[0-9]+\] audit: type=1326 audit\([.:0-9]+\): auid=[0-9]+ uid=[0-9]+ gid=[0-9]+ ses=[0-9]+ subj=unconfined pid=[0-9]+ (comm="git-remote-http" exe="/usr/libexec/git-core/git-remote-http"|comm="git-remote-http" exe="/usr/libexec/git-core/git-remote-https"|comm="gitea" exe="/app/gitea/gitea"|comm="git" exe="/usr/libexec/git-core/git"|comm="git-receive-pac" exe="/usr/bin/git-receive-pack") sig=0 arch=c000003e syscall=324 compat=0 ip=[[:alnum:]]+ code=0x50000$