Package: logcheck-database
Version: 1.2.69
Severity: wishlist
Tags: patch

This rule in ignore.d.server/smartd doesn't match messages from my SATA drives:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ smartd\[[0-9]+\]: Device: 
/dev/[^[:space:]]+( \[(3ware|cciss)_disk_[[:digit:]]+\])?, SMART 
(Prefailure|Usage) Attribute: [[:digit:]]+ [_[:alnum:]]+ changed from 
[[:digit:]]+( to [[:digit:]]+)?( \[Raw [[:digit:]]+\])? to [[:digit:]]+( \[Raw 
[[:digit:]]+\])?$

This one should:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ smartd\[[0-9]+\]: Device: 
/dev/[^[:space:]]+( \[((3ware|cciss)_disk_[[:digit:]]+|SAT)\])?, SMART 
(Prefailure|Usage) Attribute: [[:digit:]]+ [_[:alnum:]]+ changed from 
[[:digit:]]+( to [[:digit:]]+)?( \[Raw [[:digit:]]+\])? to [[:digit:]]+( \[Raw 
[[:digit:]]+\])?$

An example of regular log lines that this rule should ignore:

Nov  5 06:27:31 testament smartd[1922]: Device: /dev/sda [SAT], SMART Usage 
Attribute: 194 Temperature_Celsius changed from 119 to 118
Nov  5 06:27:31 testament smartd[1922]: Device: /dev/sdb [SAT], SMART Usage 
Attribute: 194 Temperature_Celsius changed from 78 to 77

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to