Bug#316618: [Logcheck-devel] Bug#316618: hddtemp
Rainer Zocholl
UseNet-Posting-Nospam-74308- at zocki.toppoint.de
Sat Jul 2 13:22:00 UTC 2005
UseNet-Posting-Nospam-74308- at zocki.toppoint.de(Rainer Zocholl) 02.07.05 11:59
Once upon a time "Rainer Zocholl " shaped the electrons to say...
>Package: logcheck
>Version: 1.2.40
>System Events
>=-=-=-=-=-=-=
>Jul 2 09:05:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul 2 09:05:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping
>Jul 2 09:10:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul 2 09:10:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping
>Jul 2 09:14:18 data smartd[1456]: Device: /dev/hda, 7 Currently
>unreadable (pending) sectors
>Jul 2 09:14:21 data smartd[1456]: Device: /dev/hdb, 1 Offline
>uncorrectable sectors
>Jul 2 09:15:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul 2 09:15:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>36 C Jul 2 09:20:52 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520:
>43 C Jul 2 09:20:52 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH
>EF: drive is sleeping
>Jul 2 09:25:51 data hddtemp[15424]: /dev/hda: IBM-DJNA-351520: 43 C
>Jul 2 09:25:51 data hddtemp[15424]: /dev/hdb: FUJITSU MPG3204AH EF:
>drive is sleeping
I found that there is already /etc/logcheck/ignore.d.server:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp\[[0-9]+\]:
/dev/([hs]d[a-z]|sg[0-9]): .*: [0-9]+ [CF]$
But for my surprise in logcheck.conf "paramoid"
was selected...
Selecting "server" solves that problem partial.
Open:
a) It would be nice if the loglevel would be reported in the mail too.
b) How not to ignore too large "C" values?
c) Why is "drive is sleeping" not ignored? "[0-9]+ [CF]" will not fit IMHO
Rainer
More information about the Logcheck-devel
mailing list