===== logcheck: Ignore "cron session" messages in /var/log/auth.log =====
root@quepasa:/etc/logcheck# hg diff . | colordiff
diff -r 83788d1369c7 logcheck/ignore.d.server/cron
--- a/logcheck/ignore.d.server/cron Fri Jan 29 02:01:18 2010 +0100
+++ b/logcheck/ignore.d.server/cron Fri Jan 29 02:01:30 2010 +0100
@@ -2,3 +2,4 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (/usr/bin/)?crontab\[[0-9]+\]: \([[:alnum:]-]+\) REPLACE \([[:alnum:]-]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (/usr/bin/)?crontab\[[0-9]+\]: \([[:alnum:]-]+\) (BEGIN|END) EDIT \([[:alnum:]-]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]: nss_ldap: reconnect(ing|ed) to LDAP server(\.\.\.| after [0-9]+ attempt\(s\))$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]: pam_unix\(cron:session\): session (opened|closed) for user [._[:alnum:]-]+( by \(uid=[0-9]+\))?$
{{tag>logcheck}}