[Logcheck-devel] Bug#295254: logcheck: ignore.d.server pattern for 'Timeout' missing

Jamie L. Penman-Smithson jamie at silverdream.org
Tue Feb 15 00:38:25 UTC 2005


tag 295254 pending
thanks

On Mon, 2005-02-14 at 19:40 +0100, Ingo Theiss wrote:
> there is no pattern for 'Timeout' message without additional
> information. the following message should be ignored to:
> 
> Feb 14 17:23:15 web1 pure-ftpd: (www-0021-02 at 217.186.212.38) [INFO]
> Timeout

I've added the following rule to CVS, which matches that:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd:
\([.[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Timeout$

> btw: isn't it better to provide ONE rule to ignore every message
> with '[INFO]'?

It's usually better to avoid broad rules like [INFO].*. For now, I'll
add the above rule and leave it as is and discuss it with the rest of
the logcheck team.

-j

-- 
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
 w: http://www.silverdream.org | p: sms at silverdream.org
 pgp key @ http://silverdream.org/~jps/pub.key
 21:30:02 up 17 min,  2 users,  load average: 2.65, 2.52, 1.58

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050215/d017b86f/attachment.pgp 


More information about the Logcheck-devel mailing list