Package: mdadm
Version: 4.5-4
Severity: wishlist
Tags: patch
Dear Maintainer,
please, update logcheck rules. I updated a part of existing rules, so
normal informative messages are filtered out under normal conditions.
I tested the rules with the systemd and the journal only, but regexps
contains at least rsyslog's date-time prefix…
Thanks for your work
Best Regards
--
Zito
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: md driver [.[:digit:]]+
MAX_MD_DEVS=[[:digit:]]+, MD_SB_DISKS=[[:digit:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: bitmap version [.[:digit:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: md[[:digit:]]+ stopped\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: md[[:digit:]]+ still in use\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: cannot remove active disk [[:alnum:]]+ from
md[[:digit:]]+ \.\.\. ?$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: raid([01456]|456|10) personality registered
for level ([01456]|10)$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md:
(data-check|requested-resync|resync|reshape|recovery) of RAID array
md[[:digit:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: resuming
(data-check|requested-resync|resync|reshape|recovery) of md[[:digit:]]+ from
checkpoint\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: md[[:digit:]]+:
(data-check|requested-resync|resync|reshape|recovery) done\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: minimum _guaranteed_ ?speed: [[:digit:]]+
KB/sec/disk\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: using maximum available idle IO bandwidth
\(but not more than [[:digit:]]+ KB/sec\) for
(data-check|requested-resync|resync|reshape|recovery)\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: delaying
(data-check|requested-resync|resync|reshape|recovery) of md[[:digit:]]+ until
md[[:digit:]]+ has finished \(they share one or more physical units\)$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: using [[:digit:]]+k window, over a total of
[[:digit:]]+k?( blocks)?\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: (un)?bind<[^>]+>$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? md: export_rdev\([^)]+\)$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? raid[[:digit:]]+: raid set [[:alnum:]]+ active
with [[:digit:]]+ out of [[:digit:]]+ mirrors$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])? RAID([01456]|10) conf printout:$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])?[[:space:]]+---( [wrf]d:[[:digit:]]+){2,3}$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[
*[[:digit:]]+\.[[:digit:]]+\])?[[:space:]]+disk [[:digit:]]+,(
wo:[[:digit:]]+,)? o:[[:digit:]]+, dev:[[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ mdadm(\[[[:digit:]]+\])?:
(mdadm: )?Rebuild((Start|Finish)ed|[[:digit:]]+) event detected on md device
/dev/[-_./[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ mdadm(\[[[:digit:]]+\])?:
(mdadm: )?SpareActive event detected on md device /dev/[-_./[:alnum:]]+,
component device /dev/[-_./[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+
(mdadm|sh)(\[[[:digit:]]+\])?: (mdadm: )?(New|Degraded)Array event detected on
md device /dev/[-_./[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+
(mdadm|sh)(\[[[:digit:]]+\])?: (mdadm: )?DeviceDisappeared event detected on md
device /dev/[-_./[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Started mdcheck_continue\.timer - MD array scrubbing - continuation\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Started mdcheck_start\.timer - MD array scrubbing\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Starting mdcheck_start\.service - MD array scrubbing\.\.\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
mdcheck_continue\.service - MD array scrubbing - continuation was skipped
because of an unmet condition check
\(ConditionPathExistsGlob=/var/lib/mdcheck/MD_UUID_\*\)\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Started mdmonitor-oneshot\.service - Reminder for degraded MD arrays\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Started mdmonitor\.service - MD array monitor\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
(mdcheck_start|mdmonitor-oneshot)\.service: Deactivated successfully\.$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ root\[[[:digit:]]+\]:
mdcheck start checking /dev/[-_./[:alnum:]]+$
^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]:
Finished mdcheck_start\.service - MD array scrubbing\.$
