also sprach martin f krafft <[EMAIL PROTECTED]> [2006.03.19.0418 +0100]:
> ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ syslog-ng\[[[:digit:]]{1,5}\]: Log
> statistics;
> (processed='(source|destination)\([-_[:alnum:]]+\)=[[:digit:]]+',? ?)
Replacing ",? ?" with "(, )?" may be a little clearer.
Anyway, please also consider adding the following two lines to
/etc/logcheck/ignore.d.server/syslog-ng:
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ syslog-ng\[[[:digit:]]{1,5}\]:
SIGHUP received, reloading configuration;$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ syslog-ng\[[[:digit:]]{1,5}\]:
Duplicate stats counter; (counter='[^']+'(, )?)
This will get rid of messages like
Mar 19 07:35:38 wall syslog-ng[5922]: SIGHUP received, reloading
configuration;
Mar 19 07:35:39 wall syslog-ng[5922]: Duplicate stats counter;
counter='udp(AF_INET(127.0.0.1:514))'
in the logcheck report. The messages are routine and do not warrant
administrator attention.
--
.''`. martin f. krafft <[EMAIL PROTECTED]>
: :' : proud Debian developer and author: http://debiansystem.info
`. `'`
`- Debian - when you have better things to do than fixing a system
Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
why do they sterilise the needle for lethal injections?
signature.asc
Description: Digital signature (GPG/PGP)
