Package: otrs
Version: 1:1.3.3p01-4
Severity: wishlist
Tags: patch
Logcheck is a very useful tool for monitoring the logs of a particular program.
OTRS is quite chatty in its logfile so it would be very useful to get a set of
expressions which described the "normal" logs which can be ignored so that then
OTRS's logs can be easily monitored without badgering the hell out of the
admin.
>From time to time, OTRS does spit out more important logs which are more
>easily
seen with this setup.
As I run logcheck on a server running OTRS, I've been gradually accumulating
log expressions. To get the ball rolling I thought I'd include a patch for
them.
Depending on how we'd want to do this, we could need lots of little expressions
for every possible log, or we could just simplify these down into a few
expressions with broad wildcard chunks. The patch below closes out pretty
much every normal log on our OTRS install, but I daresay with a different
config, the list would be different.
Let me know what you think,
Gavin
--- /etc/logcheck/ignore.d.server/otrs.notexist 2008-10-21 10:01:42.000000000
+0100
+++ /etc/logcheck/ignore.d.server/otrs 2008-10-21 10:01:17.000000000 +0100
@@ -0,0 +1,17 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PM3|CGI)-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::Article::ArticleSend\] Sent email to '("?[
'[:alnum:][:punct:]-]+"? )?<?[[:punct:][:alnum:[EMAIL PROTECTED]:alnum:].-]+>?(
\([[:alnum:]]+\))?' from '("?[ [:alnum:]']+"?)?<?[[:punct:][:alnum:[EMAIL
PROTECTED]:alnum:].-]+>?'\. HistoryType =>
(Forward|SendAutoReply|SendCustomerNotification|SendAnswer|Bounce), Subject =>
Re: \[Ticket#[[:alnum:]]+\] .*;$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|PM3)-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::Article::Send(Customer|Agent)Notification\]
Sent (customer|agent)
'(StateUpdate|NewTicket|FollowUp|AddNote|PendingReminder)' notification to
'("?[ [:alnum:]-]+"? )?<[EMAIL PROTECTED]:alnum:]-]+>?'\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::Article::SendAutoResponse\] Sent auto
response \(SendAutoReply\) for Ticket \[[0-9]+\] \(TicketID=[0-9]+,
ArticleID=[0-9]+\) to '[[:punct:][:alnum:] "'-]*<?[[:punct:][:alnum:[EMAIL
PROTECTED]:alnum:].-]+>?( \([[:alnum:]]+\))?'\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::TicketCreate\] New Ticket \[[0-9]+/.*\]
created \(TicketID=[0-9]+,Queue=[[:alnum:]]+,Priority=[0-9]+ normal,State=new\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::PostMaster::Filter::MatchDBSource::Run\] Filter:
'.*' Set param 'X-OTRS-[[:alnum:]]+' to '[[:punct:][:alnum:]]+' \(Message-ID:
<.*>\)
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::PostMaster::FollowUp::Run\] FollowUp Article to
Ticket \[[0-9]+\] created \(TicketID=[0-9]+, ArticleID=[0-9]+\)\. ,$
+
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Auth::DB::Auth\] User: [[:punct:][:alnum:]]+
authentication ok \(REMOTE_ADDR:
[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\)\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::AuthSession::DB::CheckSessionID\] SessionID
\([[:alnum:]]+\) too old \([0-9]+h\)! Don't grant access!!!$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::AuthSession::DB::CheckSessionID\] SessionID:
'[[:alnum:]]+' is invalid!+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(DeleteSessionIDs|CGI)-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::AuthSession::DB::RemoveSessionID\] Removed
SessionID [[:alnum:]]+\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|CGI)-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::Article::Send(Customer|Agent)Notification\]
Sent (agent|customer) '(Move|StateUpdate|OwnerUpdate|QueueUpdate)' notification
to '([[:alnum:][:punct:]. -]+)?<?[[:punct:][:alnum:[EMAIL PROTECTED]>?(
\([[:alnum:]]+\))?'\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-(PendingJobs|CGI)-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::Ticket::Article::ArticleSend\] Sent email to
'"?['[:alnum:] -]+"? <[[:punct:][:alnum:[EMAIL PROTECTED]>' from '[[:alnum:]
-]+ <[[:punct:][:alnum:[EMAIL PROTECTED]>'. HistoryType =>
SendCustomerNotification, Subject => Re: \[Ticket#[0-9]+\] New State "(closed
successful|open)"!;$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-PM3-10\[[0-9]+\]:
\[Notice\]\[main::FetchMail\] Fetched [0-9]+ email\(s\) from [EMAIL
PROTECTED]:alnum:]-]+.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-GenericAgent-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::PID::PIDCreate\] Can't create PID GenericAgent,
because it's already running \([[:alnum:].-]+/[0-9]+\)!$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ OTRS-CGI-10\[[0-9]+\]:
\[Notice\]\[Kernel::System::User::SetPassword\] User: '[[:alnum:]]+' changed
password successfully!$
+
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
Versions of packages otrs depends on:
ii adduser 3.102 Add and remove users and groups
ii apache2-mpm-prefork [apach 2.2.3-4+etch5 Traditional model for Apache HTTPD
ii libauthen-sasl-perl 2.10-1 Authen::SASL - SASL Authentication
ii libdate-pcalc-perl 1.2-2 Perl module for Gregorian calendar
ii libdbi-perl 1.53-1etch1 Perl5 database interface by Tim Bu
ii libemail-valid-perl 0.179-1 Check validity of Internet email a
ii libio-stringy-perl 2.110-2 Perl5 modules for IO from scalars
ii libmailtools-perl 1.74-1 Manipulate email in perl programs
ii libmime-perl 5.420-0.1 Perl5 modules for MIME-compliant m
ii perl 5.8.8-7etch3 Larry Wall's Practical Extraction
Versions of packages otrs recommends:
ii aspell 0.60.4-4 GNU Aspell spell-checker
ii ispell 3.1.20.0-4.3 International Ispell (an interacti
ii libapache2-mod-perl2 2.0.2-2.4 Integration of perl with the Apach
ii libdbd-mysql-perl 3.0008-1 A Perl5 database interface to the
ii libdbd-pg-perl 1.49-2 a PostgreSQL interface for Perl 5
ii libgd-graph-perl 1.43.08-2.1 Graph Plotting Module for Perl 5
ii libgd-text-perl 0.86-3.1 Text utilities for use with GD
ii mysql-server 5.0.32-7etch6 mysql database server (meta packag
ii mysql-server-5.0 [mysql-se 5.0.32-7etch6 mysql database server binaries
ii procmail 3.22-16 Versatile e-mail processor
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
