» Do it. Now.

logcheck: Ignore "cron session" messages in /var/log/auth.log

root@quepasa:/etc/logcheck# hg diff . | colordiff
diff -r 83788d1369c7 logcheck/ignore.d.server/cron 
--- a/logcheck/ignore.d.server/cron	Fri Jan 29 02:01:18 2010 +0100 
+++ b/logcheck/ignore.d.server/cron	Fri Jan 29 02:01:30 2010 +0100 
@@ -2,3 +2,4 @@ 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (/usr/bin/)?crontab\[[0-9]+\]: \([[:alnum:]-]+\) REPLACE \([[:alnum:]-]+\)$ 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (/usr/bin/)?crontab\[[0-9]+\]: \([[:alnum:]-]+\) (BEGIN|END) EDIT \([[:alnum:]-]+\)$ 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]: nss_ldap: reconnect(ing|ed) to LDAP server(\.\.\.| after [0-9]+ attempt\(s\))$ 
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]: pam_unix\(cron:session\): session (opened|closed) for user [._[:alnum:]-]+( by \(uid=[0-9]+\))?$
snippets/logcheck-ignore-cron-session-messages-in-auth.log.txt · Last modified: 2010/01/31 05:59 (external edit)