Bug#322570: [Logcheck-devel] Bug#322570: logcheck rules for horde
maximilian attems
debian at sternwelten.at
Thu Aug 18 07:59:19 UTC 2005
tags 322570 pending
thanks
On Thu, 18 Aug 2005, Martin Lohmeier wrote:
> maximilian attems wrote:
>
> | please post some loglines that above rules suppress so we can test on
> them.
>
> see attachment.
>
> | don't use '.*' i guess a vaild username is [_[:alnum:]-]+
>
> Yes, this is a username. I used '.*' because the username could contain
> some special characters like '@', '-', '_' and '.' .... maybe you add
> this 4 characters to the regex.
>
> | as soon as both points are covered i'll add your rule to current cvs.
>
> by, Martin
ok, thanks add the 2 attached rules to current cvs.
please test them on your setup.
--
maks
-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] Login success for [@._[:alnum:]-]+ \[[.0-9]{7,15}\] to Horde \[on line [0-9]+ of ".+"\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] User [@._[:alnum:]-]+ \[[.0-9]{7,15}\] logged out of Horde \[on line [0-9]+ of ".+"\]$
More information about the Logcheck-devel
mailing list