Dear maintainer,
Here are some sample messages that are currently not matched (from my
up-to-date Debian testing/bookworm system):
Oct 13 07:09:17 joffe systemd[1]:
var-cache-pbuilder-build-cow.1023683-dev-ptmx.mount: Deactivated
successfully.
Oct 13 08:59:17 joffe systemd[1]: session-832.scope: Deactivated successfully.
Oct 10 14:42:45 joffe systemd[1]: lvm2-lvmpolld.socket: Deactivated
successfully.
Oct 10 14:42:42 joffe systemd[1]: dm-event.socket: Deactivated successfully.
Oct 13 04:39:21 joffe systemd[1]: Finished Clean php session files.
Oct 13 05:27:20 joffe systemd[1]: Finished Hourly check for daily
apt-listbugs preferences cleanup.
Oct 9 00:13:29 joffe systemd[1]: Finished Autocommit of changes in
/etc directory.
Oct 11 12:51:50 joffe systemd[1]: Started pbuilder_create.
Oct 13 08:56:59 joffe systemd[1]: Started Session 832 of User skangas.
Oct 12 20:30:41 joffe systemd[1]: Started Session 755 of User skangas.
Oct 12 11:25:42 joffe systemd[1]: Started Hostname Service.
Oct 13 12:25:38 joffe systemd[1]: Starting Hourly check for daily
apt-listbugs preferences cleanup...
Oct 9 05:28:58 joffe systemd[1]: plocate-updatedb.service: Consumed
22.180s CPU time.
Oct 11 12:51:59 joffe systemd[1]:
run-rd4b1b97c71c04b88a153cbf5e084f9d3.scope: Consumed 1.054s CPU time.
Oct 11 12:52:18 joffe systemd[1]: system-pbuilder-create-650297.slice:
Consumed 2.065s CPU time.
Note also that this rule is no longer necessary:
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]:
[-_[:alnum:]]+\.service: Succeeded\.$
The messages have been replaced with "Deactivated successfully" (as above).
Please see the attached patch.
From 8e12d82265f187966a1a708155fcca68ac1ebc49 Mon Sep 17 00:00:00 2001
From: Stefan Kangas <[email protected]>
Date: Thu, 13 Oct 2022 17:14:38 +0200
Subject: [PATCH] Adjust systemd rules for recent systemd
---
rulefiles/linux/ignore.d.server/systemd | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/rulefiles/linux/ignore.d.server/systemd b/rulefiles/linux/ignore.d.server/systemd
index feedac5..f630b9f 100644
--- a/rulefiles/linux/ignore.d.server/systemd
+++ b/rulefiles/linux/ignore.d.server/systemd
@@ -1,9 +1,10 @@
-^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Started|Reached|Stopped) target [ +[:alnum:]]+\.$
-^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Starting|Stopping) [ +[:alnum:]/]+\.(\.\.)?$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Started|Reached|Stopped) [ +_[:alnum:]]+\.$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Starting|Stopping) [- +[:alnum:]/]+\.(\.\.)?$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Start|Stopp)ed [ +[:alnum:]/]+\.$
-^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: Reloading\.$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: (Reloading|Reexecuting)\.$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: Time has been changed$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: [-_[:alnum:]]+.timer: Adding ([0-9]+h )?([0-9]{1,2}min )?[0-9]{1,3}\.[0-9]{3,6}m?s random time\.$
-^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: [-_[:alnum:]]+\.service: Succeeded\.$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: [-_.[:alnum:]]+\.(service|mount|scope|socket): Deactivated successfully\.$
^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: session-[[:alnum:]]+\.scope: Succeeded\.$
-^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: Finished (Rotate log files|Daily apt (download|upgrade and clean) activities|Daily man-db regeneration)\.$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: Finished [-[:alnum:] /]+\.$
+^[[:alpha:]]{3} [ :[:digit:]]{11} [._[:alnum:]\-]+ systemd\[[0-9]+\]: [-_.[:alnum:]]+\.(service|mount|scope|socket|slice): Consumed ([[:digit:].]+min )?[[:digit:].]+s CPU time\.$
--
2.35.1
