SF.net SVN: logwatch:[61] scripts/services/pam_unix
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Revision: 61
http://logwatch.svn.sourceforge.net/logwatch/?rev=61&view=rev
Author: stefjakobs
Date: 2011-06-25 20:30:31 +0000 (Sat, 25 Jun 2011)
Log Message:
-----------
add: support for: /path/to/cron
Modified Paths:
--------------
scripts/services/pam_unix
Modified: scripts/services/pam_unix
===================================================================
--- scripts/services/pam_unix 2011-06-25 20:19:24 UTC (rev 60)
+++ scripts/services/pam_unix 2011-06-25 20:30:31 UTC (rev 61)
@@ -276,7 +276,7 @@
if ($line =~ s/^authentication failure; .*uid=(\d+) euid=(\d+) tty=(.+) ruser= rhost= user=(.+)$/$4($1,$2) on display $3/) {
$data{$service}{'Authentication Failures'}{$line}++;
}
- } elsif ($service =~ /^(f)?crond?$/ ) {
+ } elsif ($service =~ /^(?:\/[\w\/]+\/|f)?crond?$/ ) {
if ($line =~ s/^session opened for user (.+) by \(uid=\d+\)/$1/) {
($Detail >= 5) && $data{$service}{'Sessions Opened'}{$line}++;
} elsif ($line =~ /session closed for user/) {
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense..
http://p.sf.net/sfu/splunk-d2d-c1