Bug#316618: [Logcheck-devel] Bug#316618: hddtemp

[Rainer Zocholl]

UseNet-Posting-Nospam-74308- at zocki.toppoint.de(Rainer Zocholl)  02.07.05 11:59

Once upon a time "Rainer Zocholl " shaped the electrons to say...

>Package: logcheck
>Version: 1.2.40

>System Events
>=-=-=-=-=-=-=
>Jul  2 09:05:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul  2 09:05:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping
>Jul  2 09:10:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul  2 09:10:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping
>Jul  2 09:14:18 data smartd[1456]: Device: /dev/hda, 7 Currently
>unreadable (pending) sectors
>Jul  2 09:14:21 data smartd[1456]: Device: /dev/hdb, 1 Offline
>uncorrectable sectors
>Jul  2 09:15:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul  2 09:15:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>36 C Jul  2 09:20:52 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520:
>43 C Jul  2 09:20:52 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH
>EF: drive is sleeping
>Jul  2 09:25:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul  2 09:25:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping


I found that there is already /etc/logcheck/ignore.d.server:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp\[[0-9]+\]: 
/dev/([hs]d[a-z]|sg[0-9]): .*: [0-9]+ [CF]$

But for my surprise in logcheck.conf "paramoid" 
was selected...

Selecting "server" solves that problem partial.

Open:

a) It would be nice if the loglevel would be reported in the mail too.
b) How not to ignore too large "C" values?
c) Why is "drive is sleeping" not ignored? "[0-9]+ [CF]" will not fit IMHO


Rainer