[Logcheck-devel] Bug#337998: logcheck ignore rules updates

Dave Vehrs dvehrs at gmail.com
Mon Nov 7 18:53:05 UTC 2005


Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/kernel
          /etc/logcheck/ignore.d.workstation/kernel
Severity:  Minor
Tags: Patch

Local system: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Updated the following rules to match the output seen on my system.

(Note:  Rules should be on a single line but email may break them up)

---------------------------

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[0-9]: USB
disconnect, address [0-9]$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[.[:digit:]]+:
USB disconnect, address [0-9]+$

---------------------------

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[0-9]+: new
(low|full|high) speed USB device using ([_[:alnum:]-]+ and )?address
[0-9]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[.[:digit:]]+:
new (low|full|high) speed USB device using ([_[:alnum:]-]+ and
)?address [0-9]+$

---------------------------

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(evdev|evbug|joydev): (already
loaded|loaded successfully|blacklisted)$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(mousedev|tsdev|evdev|evbug|joydev):
(already loaded|loaded successfully|blacklisted)$

---------------------------

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ Joystick \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ (Joystick|Keyboard|Mouse) \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

---------------------------

Thanks,

Dave Vehrs





More information about the Logcheck-devel mailing list