** Description changed:
[Impact]
Logwatch's purpose is to flag important issues for admins to address, so
false positive errors like this one risk obfuscating real errors.
[Test Case]
In an lxd container:
$ now=$(date +"%b %d %T")
$ uptime=$(cat /proc/uptime | cut -d' ' -f1)
$ fake_message="${now} ${HOSTNAME} kernel: [${uptime}] RAS: Correctable
Errors collector initialized"
$ echo "${fake_message}" >> /var/log/kern.log
### Broken behavior:
$ logwatch --service kernel --range Today
(...)
- --------------------- Kernel Begin ------------------------
+ --------------------- Kernel Begin ------------------------
- WARNING: Kernel Errors Present
- RAS: Correctable Errors collector initi ...: 1 Time(s)
-
- ---------------------- Kernel End -------------------------
+ WARNING: Kernel Errors Present
+ RAS: Correctable Errors collector initi ...: 1 Time(s)
+
+ ---------------------- Kernel End -------------------------
(...)
+ ### Install fix
+ $ sudo add-apt-repository -y ppa:bryce/logwatch-sru-1797836
+ $ sudo apt-get update
+ $ sudo apt-get install logwatch
+ $ apt-cache policy logwatch | grep Installed:
+ Installed: 7.4.3+git20161207-2ubuntu1.18.04.1~bionic1
+
### Fixed behavior
- tbd (should be a blank report I believe)
-
- $ sudo apt
+ $ logwatch --service kernel --range Today
+ $
[Regression Potential]
Since logwatch filters logs for errors pertinent to administrators,
standard things to watch out for are undesired changes in this filtering
behavior, such as flagging or failing to flag issues differently than
before, other than the specific messages being filtered with this
change.
-
[Fix]
A simple one-line fix to logwatch's kernel script will filter out the
specific error message causing the false positive. This is a backport
of a patch included in upstream's 7.5.0. Disco and eoan already have
this, so it only needs backported to bionic.
[Discussion]
[Original Report]
Since upgrade to 18.04 I get logwatch kernel error warnings about a RAS
correctable Errors collector.
WARNING: Kernel Errors Present
RAS: Correctable Errors collector initi ...: 2 Time(s)
I guess logwatch is triggered from the word "Error" which in this case
is not an error but the name of the service.
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: logwatch 7.4.3+git20161207-2ubuntu1
ProcVersionSignature: Ubuntu 4.15.0-36.39-generic 4.15.18
Uname: Linux 4.15.0-36-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.4
Architecture: amd64
Date: Mon Oct 15 07:57:21 2018
InstallationDate: Installed on 2012-09-06 (2229 days ago)
InstallationMedia: Ubuntu-Server 12.04.1 LTS "Precise Pangolin" - Release
amd64 (20120817.3)
PackageArchitecture: all
SourcePackage: logwatch
UpgradeStatus: Upgraded to bionic on 2018-10-11 (3 days ago)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1797836
Title:
[SRU] logwatch reports false kernel error warning
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1797836/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
