Bug#907512: logwatch: some systemd-logind messages not filtered out
Package: logwatch Version: 7.4.3+git20180713-1 Followup-For: Bug #907512 I have the same problem. I am seeing thousands of these lines in my "logwatch --service secure" output. The offending log lines are all of the form: Dec 8 23:36:05 novatech systemd-logind[1332]: Session 10573 logged out. Waiting for processes to exit. The following patch fixes the problem for me (by ignoring those lines): --- /usr/share/logwatch/scripts/services/secure 2018-10-02 18:52:16.0 +0100 +++ /etc/logwatch/scripts/services/secure 2018-12-10 10:36:24.707158248 + @@ -285,6 +285,7 @@ ( $ThisLine =~ /systemd-logind\[\d+\]: New seat seat\d+\./) or ( $ThisLine =~ /systemd-logind\[\d+\]: Watching system buttons on /) or ( $ThisLine =~ /systemd-logind\[\d+\]: Failed to start session scope (\S+): Transaction is destructive\./) or + ( $ThisLine =~ /systemd-logind\[\d+\]: Session \d+ logged out/) or ( $ThisLine =~ /DIGEST-MD5 common mech free/) or ( $ThisLine =~ /sshguard\[\d+\]: Reloading rotated file /) or ( $ThisLine =~ /sshguard\[\d+\]: Exiting on signal/) or -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_IE.utf8), LANGUAGE=en_GB (charmap=UTF-8) (ignored: LC_ALL set to en_IE.utf8) Shell: /bin/sh linked to /bin/bash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages logwatch depends on: ii exim4-daemon-light [mail-transport-agent] 4.91-8+b1 ii perl 5.28.0-3 Versions of packages logwatch recommends: ii libdate-manip-perl 6.73-1 pn libsys-cpu-perl ii libsys-meminfo-perl 0.99-1+b3 Versions of packages logwatch suggests: ii fortune-mod 1:1.99.1-7+b1 -- no debconf information
Bug#907512: logwatch: some systemd-logind messages not filtered out
Package: logwatch Version: 7.4.3+git20161207-2 Severity: normal Dear Maintainer, In the logwatch output I see hundreds of messages like: systemd-logind: Session 5 logged out. Waiting for processes to exit.: 1 Time(s) I think these are normal systemd syslog spam, and should be filtered out. (this is on a busy server that has many users using ssh to it to perform short tasks) Peter C -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.16.0-2-amd64 (SMP w/56 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages logwatch depends on: ii exim4-daemon-light [mail-transport-agent] 4.91-7 ii perl 5.26.2-7 Versions of packages logwatch recommends: ii libdate-manip-perl 6.72-1 ii libsys-cpu-perl 0.61-2+b3 ii libsys-meminfo-perl 0.99-1+b2 Versions of packages logwatch suggests: pn fortune-mod -- Configuration Files: /etc/cron.daily/00logwatch changed [not included] -- no debconf information -- Dr Peter Chubb Tel: +61 2 9490 5852 http://ts.data61.csiro.au/ Trustworthy Systems Group Data61, CSIRO (formerly NICTA)
