Package: otrs Version: 1:1.3.3p01-4 Severity: wishlist Tags: patch
Logcheck is a very useful tool for monitoring the logs of a particular program. OTRS is quite chatty in its logfile so it would be very useful to get a set of expressions which described the "normal" logs which can be ignored so that then OTRS's logs can be easily monitored without badgering the hell out of the admin. >From time to time, OTRS does spit out more important logs which are more >easily seen with this setup. As I run logcheck on a server running OTRS, I've been gradually accumulating log expressions. To get the ball rolling I thought I'd include a patch for them. Depending on how we'd want to do this, we could need lots of little expressions for every possible log, or we could just simplify these down into a few expressions with broad wildcard chunks. The patch below closes out pretty much every normal log on our OTRS install, but I daresay with a different config, the list would be different. Let me know what you think, Gavin --- /etc/logcheck/ignore.d.server/otrs.notexist 2008-10-21 10:01:42.000000000 +0100 +++ /etc/logcheck/ignore.d.server/otrs 2008-10-21 10:01:17.000000000 +0100 @@ -0,0 +1,17 @@ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PM3|CGI)-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::Article::ArticleSend\] Sent email to '("?[ '[:alnum:][:punct:]-]+"? )?<?[[:punct:][:alnum:[EMAIL PROTECTED]:alnum:].-]+>?( \([[:alnum:]]+\))?' from '("?[ [:alnum:]']+"?)?<?[[:punct:][:alnum:[EMAIL PROTECTED]:alnum:].-]+>?'\. HistoryType => (Forward|SendAutoReply|SendCustomerNotification|SendAnswer|Bounce), Subject => Re: \[Ticket#[[:alnum:]]+\] .*;$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|PM3)-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::Article::Send(Customer|Agent)Notification\] Sent (customer|agent) '(StateUpdate|NewTicket|FollowUp|AddNote|PendingReminder)' notification to '("?[ [:alnum:]-]+"? )?<[EMAIL PROTECTED]:alnum:]-]+>?'\.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::Article::SendAutoResponse\] Sent auto response \(SendAutoReply\) for Ticket \[[0-9]+\] \(TicketID=[0-9]+, ArticleID=[0-9]+\) to '[[:punct:][:alnum:] "'-]*<?[[:punct:][:alnum:[EMAIL PROTECTED]:alnum:].-]+>?( \([[:alnum:]]+\))?'\.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::TicketCreate\] New Ticket \[[0-9]+/.*\] created \(TicketID=[0-9]+,Queue=[[:alnum:]]+,Priority=[0-9]+ normal,State=new\)$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]: \[Notice\]\[Kernel::System::PostMaster::Filter::MatchDBSource::Run\] Filter: '.*' Set param 'X-OTRS-[[:alnum:]]+' to '[[:punct:][:alnum:]]+' \(Message-ID: <.*>\) +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]: \[Notice\]\[Kernel::System::PostMaster::FollowUp::Run\] FollowUp Article to Ticket \[[0-9]+\] created \(TicketID=[0-9]+, ArticleID=[0-9]+\)\. ,$ + +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Auth::DB::Auth\] User: [[:punct:][:alnum:]]+ authentication ok \(REMOTE_ADDR: [0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\)\.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]: \[Notice\]\[Kernel::System::AuthSession::DB::CheckSessionID\] SessionID \([[:alnum:]]+\) too old \([0-9]+h\)! Don't grant access!!!$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]: \[Notice\]\[Kernel::System::AuthSession::DB::CheckSessionID\] SessionID: '[[:alnum:]]+' is invalid!+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(DeleteSessionIDs|CGI)-10\[[0-9]+\]: \[Notice\]\[Kernel::System::AuthSession::DB::RemoveSessionID\] Removed SessionID [[:alnum:]]+\.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|CGI)-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::Article::Send(Customer|Agent)Notification\] Sent (agent|customer) '(Move|StateUpdate|OwnerUpdate|QueueUpdate)' notification to '([[:alnum:][:punct:]. -]+)?<?[[:punct:][:alnum:[EMAIL PROTECTED]>?( \([[:alnum:]]+\))?'\.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|CGI)-10\[[0-9]+\]: \[Notice\]\[Kernel::System::Ticket::Article::ArticleSend\] Sent email to '"?['[:alnum:] -]+"? <[[:punct:][:alnum:[EMAIL PROTECTED]>' from '[[:alnum:] -]+ <[[:punct:][:alnum:[EMAIL PROTECTED]>'. HistoryType => SendCustomerNotification, Subject => Re: \[Ticket#[0-9]+\] New State "(closed successful|open)"!;$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]: \[Notice\]\[main::FetchMail\] Fetched [0-9]+ email\(s\) from [EMAIL PROTECTED]:alnum:]-]+.$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-GenericAgent-10\[[0-9]+\]: \[Notice\]\[Kernel::System::PID::PIDCreate\] Can't create PID GenericAgent, because it's already running \([[:alnum:].-]+/[0-9]+\)!$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]: \[Notice\]\[Kernel::System::User::SetPassword\] User: '[[:alnum:]]+' changed password successfully!$ + -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-686 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages otrs depends on: ii adduser 3.102 Add and remove users and groups ii apache2-mpm-prefork [apach 2.2.3-4+etch5 Traditional model for Apache HTTPD ii libauthen-sasl-perl 2.10-1 Authen::SASL - SASL Authentication ii libdate-pcalc-perl 1.2-2 Perl module for Gregorian calendar ii libdbi-perl 1.53-1etch1 Perl5 database interface by Tim Bu ii libemail-valid-perl 0.179-1 Check validity of Internet email a ii libio-stringy-perl 2.110-2 Perl5 modules for IO from scalars ii libmailtools-perl 1.74-1 Manipulate email in perl programs ii libmime-perl 5.420-0.1 Perl5 modules for MIME-compliant m ii perl 5.8.8-7etch3 Larry Wall's Practical Extraction Versions of packages otrs recommends: ii aspell 0.60.4-4 GNU Aspell spell-checker ii ispell 3.1.20.0-4.3 International Ispell (an interacti ii libapache2-mod-perl2 2.0.2-2.4 Integration of perl with the Apach ii libdbd-mysql-perl 3.0008-1 A Perl5 database interface to the ii libdbd-pg-perl 1.49-2 a PostgreSQL interface for Perl 5 ii libgd-graph-perl 1.43.08-2.1 Graph Plotting Module for Perl 5 ii libgd-text-perl 0.86-3.1 Text utilities for use with GD ii mysql-server 5.0.32-7etch6 mysql database server (meta packag ii mysql-server-5.0 [mysql-se 5.0.32-7etch6 mysql database server binaries ii procmail 3.22-16 Versatile e-mail processor -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]