Hi All,
I get these in the mail via logcheck every hour:
Apr 12 10:55:01 fourtytwo CRON[7688]: (pam_unix) session opened for user list by (uid=0) Apr 12 10:55:01 fourtytwo CRON[7688]: (pam_unix) session closed for user list
Repeat the above a zillion times :)
I looked through the config in /etc/logcheck/ignore.d.server/..., but to be honest I am no regex guru... Can someone help on how to build simple regexes for my purpose? I just want to leave out all these non-interesting messages...
Pim
Put this:
CRON\[.*\]: \(pam_unix\) session closed for CRON\[.*\]: \(pam_unix\) session opened for
into /etc/logcheck/ignore.d.server/cron
HTH,
-Roberto Sanchez
signature.asc
Description: OpenPGP digital signature
