On Tue, Jul 30, 2019 at 03:27:08PM -0300, David Bremner wrote:
> Jul 28 22:12:08 rocinante nullmailer-send[30788]: From: <sender> to:
> <recipient>
>
> That doesn't seem to be specific to my configuration, but I thought I
> should check before adding another regex. Do you not have such lines? Do
> you actually want them in the logcheck output?
Yes I have those, but countrary to the other lines which are quite generic,
I found it useful to have those. I am filtering per from/to in local
rules, not nullmailer rules.
Now, if you want to filter them too, no problem for me.
Here is the whole picture that I am running for a few days on a few systems
without any output:
#/etc/logcheck/ignore.d.server/nullmailer
nullmailer-send\[[0-9]+\]: Rescanning queue\.
nullmailer-send\[[0-9]+\]: Trigger pulled\.
nullmailer-send\[[0-9]+\]: Starting delivery, [0-9]+ message\(s\) in queue\.
nullmailer-send\[[0-9]+\]: Starting delivery: host: .+ protocol: [a-z]+ file:
[0-9\.]+
nullmailer-send\[[0-9]+\]: Sent file\.
nullmailer-send\[[0-9]+\]: Delivery complete, 0 message\(s\) remain\.
nullmailer-send\[[0-9]+\]: smtp: Succeeded:
nullmailer-send\[[0-9]+\]: Message-Id: <.+>
You may however want to be more specific on the above rules (prefixing ^\w{3} [
:0-9]{11} [._[:alnum:]-]+ nullmailer)
And this is my local rule:
#/etc/logcheck/ignore.d.server/local
nullmailer-send\[[0-9]+\]: From: <(root|logcheck)@falken.alphanet.ch> to:
<schae...@alphanet.ch>
