SF.net SVN: logwatch:[322] trunk
[email protected] Fri, 19 Feb 2016 17:27:10 +0000
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Revision: 322
http://sourceforge.net/p/logwatch/code/322
Author: opoplawski
Date: 2016-02-19 17:27:10 +0000 (Fri, 19 Feb 2016)
Log Message:
-----------
[kernel] Allow for ignoring messages based on regex
Modified Paths:
--------------
trunk/conf/services/kernel.conf
trunk/scripts/services/kernel
Modified: trunk/conf/services/kernel.conf
===================================================================
--- trunk/conf/services/kernel.conf 2016-02-19 17:26:05 UTC (rev 321)
+++ trunk/conf/services/kernel.conf 2016-02-19 17:27:10 UTC (rev 322)
@@ -30,6 +30,9 @@
# messages which often occur when kerberos tickets expire
# $ignore_rpcsec_expired = Yes
+# Ignore messages matching the given regex
+# $kernel_ignore_messages = A TPM error \(6\) occurred
+
########################################################
# This was written and is maintained by:
# Kirk Bauer <[email protected]>
Modified: trunk/scripts/services/kernel
===================================================================
--- trunk/scripts/services/kernel 2016-02-19 17:26:05 UTC (rev 321)
+++ trunk/scripts/services/kernel 2016-02-19 17:27:10 UTC (rev 322)
@@ -55,6 +55,7 @@
my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
my $Ignore_faults = $ENV{'ignore_faults'};
my $Ignore_rpcsec_expired = $ENV{'ignore_rpcsec_expired'} || 0;
+my $Ignore_messages = $ENV{'kernel_ignore_messages'} || 0;
my %SYNflood = ();
my %RAIDErrors = ();
my %DRBDErrors = ();
@@ -81,6 +82,8 @@
# following now in iptables service
or ($ThisLine =~ /^Packet log: .*PROTO=/)
or ($ThisLine =~ /IN=.*OUT=.*SRC=.*DST=.*PROTO=/)
+ # user specified ignore messages, lower cased
+ or ($ThisLine =~ /$Ignore_messages/i)
) { # ignore the above strings
} elsif ( my ($from,$on) = ( $ThisLine =~ /^Warning: possible SYN flood from ([^ ]+) on ([^ ]+):.+ Sending cookies/ ) ) {
my $Fullfrom = LookupIP($from);
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140