Bug#298495: [Logcheck-devel] Bug#298495: logcheck-database: add nagios unreachable filter

[maximilian attems]

tags 298495 moreinfo
thanks

On Tue, 08 Mar 2005, geoffc at strategicdata.com.au wrote:

> Can you please add a rule to /etc/logcheck/ignore.server/nagios so that
> host alerts about unreachable states are ignored? Patch is:

thanks for the nicely crafted rules.
 
> === nagios
> ==================================================================
> --- nagios  (revision 55)
> +++ nagios  (local)
> @@ -10,6 +10,7 @@
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: SERVICE NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;OK;.*$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;DOWN;(SOFT|HARD);.*$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UP;(SOFT|HARD);.*$
> +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UNREACHABLE;(SOFT|HARD);.*$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;DOWN;.*$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;UP;.*$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST DOWNTIME ALERT: [._[:alnum:]-]+;STOPPED;.*$
> 
could you post some of the loglines they are intended to supress.

.* should only used for remote supplied strings,
where we have _no_ controll on what gets supplied.

thanks for your feedback
maks