Pim Bliek | PingWings.nl wrote:
Hi All, I get these in the mail via logcheck every hour: Apr 12 10:55:01 fourtytwo CRON[7688]: (pam_unix) session opened for user list by (uid=0) Apr 12 10:55:01 fourtytwo CRON[7688]: (pam_unix) session closed for user list Repeat the above a zillion times :) I looked through the config in /etc/logcheck/ignore.d.server/..., but to be honest I am no regex guru... Can someone help on how to build simple regexes for my purpose? I just want to leave out all these non-interesting messages... Pim
Put this: CRON\[.*\]: \(pam_unix\) session closed for CRON\[.*\]: \(pam_unix\) session opened for into /etc/logcheck/ignore.d.server/cron HTH, -Roberto Sanchez
Attachment:
signature.asc
Description: OpenPGP digital signature