Bug#322570: [Logcheck-devel] Bug#322570: logcheck rules for horde

maximilian attems debian at sternwelten.at
Thu Aug 18 07:59:19 UTC 2005


tags 322570 pending
thanks

On Thu, 18 Aug 2005, Martin Lohmeier wrote:

> maximilian attems wrote:
> 
> | please post some loglines that above rules suppress so we can test on
> them.
> 
> see attachment.
> 
> | don't use '.*' i guess a vaild username is [_[:alnum:]-]+
> 
> Yes, this is a username. I used '.*' because the username could contain
> some special characters like '@', '-', '_' and '.' .... maybe you add
> this 4 characters to the regex.
> 
> | as soon as both points are covered i'll add your rule to current cvs.
> 
> by, Martin

ok, thanks add the 2 attached rules to current cvs.
please test them on your setup.

--
maks

-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] Login success for [@._[:alnum:]-]+ \[[.0-9]{7,15}\] to Horde \[on line [0-9]+ of ".+"\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] User [@._[:alnum:]-]+ \[[.0-9]{7,15}\] logged out of Horde \[on line [0-9]+ of ".+"\]$


More information about the Logcheck-devel mailing list