SF.net SVN: logwatch:[322] trunk

[email protected] Fri, 19 Feb 2016 17:27:10 +0000
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>
Revision: 322
          http://sourceforge.net/p/logwatch/code/322
Author:   opoplawski
Date:     2016-02-19 17:27:10 +0000 (Fri, 19 Feb 2016)
Log Message:
-----------
[kernel] Allow for ignoring messages based on regex

Modified Paths:
--------------
    trunk/conf/services/kernel.conf
    trunk/scripts/services/kernel

Modified: trunk/conf/services/kernel.conf
===================================================================
--- trunk/conf/services/kernel.conf	2016-02-19 17:26:05 UTC (rev 321)
+++ trunk/conf/services/kernel.conf	2016-02-19 17:27:10 UTC (rev 322)
@@ -30,6 +30,9 @@
 # messages which often occur when kerberos tickets expire
 # $ignore_rpcsec_expired = Yes
 
+# Ignore messages matching the given regex
+# $kernel_ignore_messages = A TPM error \(6\) occurred
+
 ########################################################
 # This was written and is maintained by:
 #    Kirk Bauer <[email protected]>

Modified: trunk/scripts/services/kernel
===================================================================
--- trunk/scripts/services/kernel	2016-02-19 17:26:05 UTC (rev 321)
+++ trunk/scripts/services/kernel	2016-02-19 17:27:10 UTC (rev 322)
@@ -55,6 +55,7 @@
 my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
 my $Ignore_faults = $ENV{'ignore_faults'};
 my $Ignore_rpcsec_expired = $ENV{'ignore_rpcsec_expired'} || 0;
+my $Ignore_messages = $ENV{'kernel_ignore_messages'} || 0;
 my %SYNflood = ();
 my %RAIDErrors = ();
 my %DRBDErrors = ();
@@ -81,6 +82,8 @@
       # following now in iptables service
       or ($ThisLine =~ /^Packet log: .*PROTO=/)
       or ($ThisLine =~ /IN=.*OUT=.*SRC=.*DST=.*PROTO=/)
+      # user specified ignore messages, lower cased
+      or ($ThisLine =~ /$Ignore_messages/i)
       ) { # ignore the above strings
    } elsif ( my ($from,$on) = ( $ThisLine =~ /^Warning: possible SYN flood from ([^ ]+) on ([^ ]+):.+ Sending cookies/ ) ) {
       my $Fullfrom = LookupIP($from);

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140