Browse Source

Add logcheck overrides for pve-cluster and sshd

Emmanuel Bouthenot 10 years ago
parent
commit
ca0ac45930

+ 2 - 0
roles/common/files/logcheck/pve-cluster_local

@@ -1,2 +1,4 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pmxcfs\[[[:digit:]]+\]: \[dcdb\] notice: data verification successful$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ kernel: svc: [:\.[:alnum:]]+, port=[[:digit:]]+: unknown version \([[:digit:]]+ for prog [[:digit:]]+, nfsd\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pve(proxy|daemon)\[[[:digit:]]+\]: (worker [[:digit:]]+ (started|finished)|starting [[:digit:]]+ worker\(s\))$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pvedaemon\[[[:digit:]]+\]: <\w+@pam> successful auth for user '\w+@pam'$

+ 1 - 0
roles/common/files/logcheck/sshd_local

@@ -1,2 +1,3 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from .*: [0-9]+: disconnected by user$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: subsystem request for sftp by user .+$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Accepted publickey for \w+ from [-:\.[:alnum:]]+ port [0-9]+ ssh2: RSA [:0-9a-f]+$