[Logcheck-devel] logcheck rules submission

Till Maas opensource at till.name
Mon May 30 10:33:05 UTC 2011


Hi,

please add the following rule to the logcheck database:

For package/daemon auditd:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Audit daemon rotating log files$

Log line as system event:
May 31 11:41:11 localhost auditd[2594]: Audit daemon rotating log files

Regards
Till



More information about the Logcheck-devel mailing list