Package: logcheck-database
Version: 1.2.44
Severity: normal
the following rule in /etc/logcheck/ignore.d.server/bind does not match
the linei(s) in our log and get reported:
rule:
-----------------------------------------------------------------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: unexpected RCODE
\((REFUSED|SERVFAIL)\) resolving '[^[:space:]]+': [.[:digit:]]+#[0-9]+$
reported line (example):
-----------------------------------------------------------------------
Jul 15 10:02:09 backup named[2828]: unexpected RCODE (REFUSED) resolving
'accounts.name/NS/IN': 64.136.35.146#53
I am not that regexp expert so I can not provide a solution.
regards
ingo
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17.3
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.5.2 Debian configuration management sy
logcheck-database recommends no packages.
-- debconf information:
logcheck-database/standard-rename-note:
logcheck-database/conffile-cleanup: false
logcheck-database/rules-directories-note:
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
