[Logcheck-devel] Bug#338003: logcheck-database new ignore rule file for cron-apt

[Dave Vehrs]

Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/cron-apt
          /etc/logcheck/ignore.d.workstation/cron-apt
Severity: Minor
Tags: Patch

Local System: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Support for cron-apts output in /var/log/messages.

Example Output:
Oct 31 04:41:04 hostname cron-apt: CRON-APT RUN
[/etc/cron-apt/config]: Mon Oct 31 04:00:01 MST 2005
Oct 31 04:41:04 hostname cron-apt: CRON-APT SLEEP: 2400, Mon Oct 31
04:40:01 MST 2005
Oct 31 04:41:04 hostname cron-apt: CRON-APT ACTION: 3-download
Oct 31 04:41:04 hostname cron-apt: CRON-APT LINE: /usr/bin/apt-get
dist-upgrade -d -y -o APT::Get::Show-Upgraded=true
Oct 31 04:41:04 hostname cron-apt: Reading package lists...
Oct 31 04:41:04 hostname cron-apt: Building dependency tree...
Oct 31 04:41:04 hostname cron-apt: The following packages will be REMOVED:
Oct 31 04:41:04 hostname cron-apt:   python-gtk2-dev
Oct 31 04:41:04 hostname cron-apt: The following packages have been kept back:
Oct 31 04:41:04 hostname cron-apt:   ant extract gdk-imlib1 irb1.8
libdmalloc4 libsigc++-2.0-dev libsigc++-dev
Oct 31 04:41:04 hostname cron-apt:   python-gtk2
Oct 31 04:41:04 hostname cron-apt: The following packages will be upgraded:
Oct 31 04:41:04 hostname cron-apt:   debootstrap dictionaries-common gimp-data
Oct 31 04:41:04 hostname cron-apt: 3 upgraded, 0 newly installed, 1 to
remove and 8 not upgraded.
Oct 31 04:41:04 hostname cron-apt: Need to get 6866kB of archives.
Oct 31 04:41:04 hostname cron-apt: After unpacking 373kB disk space
will be freed.
Oct 31 04:41:04 hostname cron-apt: Get:1 http://debian.csail.mit.edu
unstable/main dictionaries-common 0.62.0 [234kB]
Oct 31 04:41:04 hostname cron-apt: Get:2 http://debian.csail.mit.edu
unstable/main gimp-data 2.2.9-1 [6587kB]
Oct 31 04:41:04 hostname cron-apt: Get:3 http://debian.csail.mit.edu
unstable/main debootstrap 0.3.2.2 [44.8kB]
Oct 31 04:41:04 hostname cron-apt: Fetched 6866kB in 36s (187kB/s)
Oct 31 04:41:04 hostname cron-apt: Download complete and in download only mode

To add logcheck ignore rules, add the following rules to
/etc/logcheck/ignore.d.server/cron-apt and
/etc/logcheck/ignore.d.workstation/cron-apt:

(Note:  Rules should be on one line each but email may break them.)

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT RUN
\[[-[:alnum:]/]+\]: \w{3} \w{3} [ [:digit:]]+ [:[:digit:]]{8} \w{3}
[[:digit:]]{4}$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT SLEEP:
[[:digit:]]+, \w{3} \w{3} [ [:digit:]]+ [:[:digit:]]{8} \w{3}
[[:digit:]]{4}$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT ACTION:
(0-update|3-download)$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT LINE:
/usr/bin/apt-get dist-upgrade -d -y -o APT::Get::Show-Upgraded=true$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Reading package lists...$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Building dependency tree...$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following NEW
packages will be installed:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages will be REMOVED:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages have been kept back:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages will be upgraded:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: {3}[ .+[:alnum:]-]+$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: [[:digit:]]+
upgraded, [[:digit:]]+ newly installed, [[:digit:]]+ to remove and
[[:digit:]]+ not upgraded.$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Need to get
[[:digit:].]+(kB|MB)(/[.[:digit:]]+(kB|MB))* of archives.$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: After unpacking
[[:digit:].]+(kB|MB) (of additional disk space will be used|disk space
will be freed).$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Get:[[:digit:]]+
http://[.[:alnum:]/_]+ [/[:alnum:]]+ [-[:alnum:]_]+[ +.:[:alnum:]-]+
\[[.[:digit:]]+(kB|MB)\]$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Fetched
[[:digit:].]+(kB|MB) in [[:digit:]ms]+ \([[:digit:]]+kB/s\)$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Download complete
and in download only mode$

-----------------------------

Thanks,

Dave Vehrs