[Logcheck-devel] Bug#372286: logcheck-database: new rule for courier

Tilman Koschnick til at subnetz.org
Fri Jun 9 09:31:15 UTC 2006


Package: logcheck-database
Severity: wishlist
Tags: patch

Please add a new rule to the courier rule file, for messages like:

Jun  9 10:26:17 holly authdaemond.plain: nss_ldap: reconnecting to LDAP
server...
Jun  9 10:26:17 holly authdaemond.plain: nss_ldap: reconnected to LDAP
server after 1 attempt(s)

The attached rule is adapted from the cron rule file.

Cheers, Til
-------------- next part --------------
--- courier.orig	2006-06-09 11:26:49.000000000 +0200
+++ courier	2006-06-09 11:27:06.000000000 +0200
@@ -14,3 +14,4 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: Unexpected SSL connection shutdown\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd-ssl: couriertls: read: Connection reset by peer$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ imap(login|d-ssl): (LOGOUT|DISCONNECTED), user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+, time=[0-9]+, starttls=[01]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ authdaemond.plain: nss_ldap: reconnect(ing|ed) to LDAP server(\.\.\.| after [0-9]+ attempt\(s\))$


More information about the Logcheck-devel mailing list