geoffc at strategicdata.com.au
2005-Mar-07 21:51 UTC
[Logcheck-devel] Bug#298495: logcheck-database: add nagios unreachable filter
Package: logcheck-database
Version: 1.2.35
Severity: normal
Can you please add a rule to /etc/logcheck/ignore.server/nagios so that
host alerts about unreachable states are ignored? Patch is:
=== nagios
=================================================================--- nagios
(revision 55)
+++ nagios (local)
@@ -10,6 +10,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: SERVICE NOTIFICATION:
[._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;OK;.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT:
[._[:alnum:]-]+;DOWN;(SOFT|HARD);.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT:
[._[:alnum:]-]+;UP;(SOFT|HARD);.*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT:
[._[:alnum:]-]+;UNREACHABLE;(SOFT|HARD);.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION:
[._[:alnum:]-]+;[._[:alnum:]-]+;DOWN;.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION:
[._[:alnum:]-]+;[._[:alnum:]-]+;UP;.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST DOWNTIME ALERT:
[._[:alnum:]-]+;STOPPED;.*$
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686-smp
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.4.30.11 Debian configuration management sy
-- debconf information:
logcheck-database/conffile-cleanup: false
logcheck-database/rules-directories-note:
logcheck-database/standard-rename-note:
maximilian attems
2005-Mar-08 23:33 UTC
Bug#298495: [Logcheck-devel] Bug#298495: logcheck-database: add nagios unreachable filter
tags 298495 moreinfo thanks On Tue, 08 Mar 2005, geoffc at strategicdata.com.au wrote:> Can you please add a rule to /etc/logcheck/ignore.server/nagios so that > host alerts about unreachable states are ignored? Patch is:thanks for the nicely crafted rules.> === nagios > =================================================================> --- nagios (revision 55) > +++ nagios (local) > @@ -10,6 +10,7 @@ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: SERVICE NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;OK;.*$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;DOWN;(SOFT|HARD);.*$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UP;(SOFT|HARD);.*$ > +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UNREACHABLE;(SOFT|HARD);.*$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;DOWN;.*$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;UP;.*$ > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST DOWNTIME ALERT: [._[:alnum:]-]+;STOPPED;.*$ >could you post some of the loglines they are intended to supress. .* should only used for remote supplied strings, where we have _no_ controll on what gets supplied. thanks for your feedback maks
Debian Bug Tracking System
2005-Mar-08 23:48 UTC
Processed: Re: [Logcheck-devel] Bug#298495: logcheck-database: add nagios unreachable filter
Processing commands for control at bugs.debian.org:> tags 298495 moreinfoBug#298495: logcheck-database: add nagios unreachable filter There were no tags set. Tags added: moreinfo> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Debian Bug Tracking System
2005-Apr-03 00:48 UTC
[Logcheck-devel] Bug#298495: marked as done (logcheck-database: add nagios unreachable filter)
Your message dated Sat, 02 Apr 2005 19:32:08 -0500 with message-id <E1DHt28-0001Ry-00 at newraff.debian.org> and subject line Bug#298495: fixed in logcheck 1.2.37 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 7 Mar 2005 21:51:22 +0000>From geoffc at strategicdata.com.au Mon Mar 07 13:51:22 2005Return-path: <geoffc at strategicdata.com.au> Received: from sdcarl02.strategicdata.com.au (sd01.mel.strategicdata.com.au) [203.214.67.82] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1D8Q8H-0004fF-00; Mon, 07 Mar 2005 13:51:22 -0800 Received: by sd01.mel.strategicdata.com.au (Postfix, from userid 1188) id 3C096C000D48; Tue, 8 Mar 2005 08:51:19 +1100 (EST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: geoffc at strategicdata.com.au To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: logcheck-database: add nagios unreachable filter X-Mailer: reportbug 3.8 Date: Tue, 08 Mar 2005 08:51:19 +1100 Message-Id: <20050307215119.3C096C000D48 at sd01.mel.strategicdata.com.au> Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.4 required=4.0 tests=BAYES_00,HAS_PACKAGE, NO_REAL_NAME autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: logcheck-database Version: 1.2.35 Severity: normal Can you please add a rule to /etc/logcheck/ignore.server/nagios so that host alerts about unreachable states are ignored? Patch is: === nagios =================================================================--- nagios (revision 55) +++ nagios (local) @@ -10,6 +10,7 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: SERVICE NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;OK;.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;DOWN;(SOFT|HARD);.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UP;(SOFT|HARD);.*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST ALERT: [._[:alnum:]-]+;UNREACHABLE;(SOFT|HARD);.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;DOWN;.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST NOTIFICATION: [._[:alnum:]-]+;[._[:alnum:]-]+;UP;.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nagios: HOST DOWNTIME ALERT: [._[:alnum:]-]+;STOPPED;.*$ -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-2-686-smp Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.30.11 Debian configuration management sy -- debconf information: logcheck-database/conffile-cleanup: false logcheck-database/rules-directories-note: logcheck-database/standard-rename-note: --------------------------------------- Received: (at 298495-close) by bugs.debian.org; 3 Apr 2005 00:39:00 +0000>From katie at ftp-master.debian.org Sat Apr 02 16:39:00 2005Return-path: <katie at ftp-master.debian.org> Received: from gluck.debian.org [192.25.206.10] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHt8m-0002yc-00; Sat, 02 Apr 2005 16:39:00 -0800 Received: from newraff.debian.org [208.185.25.31] (mail) by gluck.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DHt8m-0004qp-00; Sat, 02 Apr 2005 17:39:00 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1DHt28-0001Ry-00; Sat, 02 Apr 2005 19:32:08 -0500 From: Todd Troxell <ttroxell at debian.org> To: 298495-close at bugs.debian.org X-Katie: $Revision: 1.55 $ Subject: Bug#298495: fixed in logcheck 1.2.37 Message-Id: <E1DHt28-0001Ry-00 at newraff.debian.org> Sender: Archive Administrator <katie at ftp-master.debian.org> Date: Sat, 02 Apr 2005 19:32:08 -0500 Delivered-To: 298495-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Source: logcheck Source-Version: 1.2.37 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.37_all.deb to pool/main/l/logcheck/logcheck-database_1.2.37_all.deb logcheck_1.2.37.dsc to pool/main/l/logcheck/logcheck_1.2.37.dsc logcheck_1.2.37.tar.gz to pool/main/l/logcheck/logcheck_1.2.37.tar.gz logcheck_1.2.37_all.deb to pool/main/l/logcheck/logcheck_1.2.37_all.deb logtail_1.2.37_all.deb to pool/main/l/logcheck/logtail_1.2.37_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 298495 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Saturday, 2 Apr 2005 17:57:00 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.37 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - Mails anomalies in the system logfiles to the administrator logcheck-database - A database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 298495 302678 302689 302744 Changes: logcheck (1.2.37) unstable; urgency=low . maks: * Fix routine message when resolvconf is installed. thanks for patch to Thomas Hood <jdthood at aglu.demon.nl> (Closes: #302678) * Add postfix rules for local procmail delivery. (Closes: #302744) * Fix logcheck su rule reporting valid `su -' use. * Add nagios rule for UNREACHABLE messages. thanks for patch to Geoff Crompton <geoff.crompton at strategicdata.com.au> (Closes: #298495) todd: * Revert warning on bad regex code (Closes: #302689) Files: e9c78a935df9b4636f90ac8665c672b7 703 admin optional logcheck_1.2.37.dsc f1ae8e497884da1a52797e7785729cbc 92707 admin optional logcheck_1.2.37.tar.gz def864951111cc13ed067c3abfe2b96c 43912 admin optional logcheck_1.2.37_all.deb b1c78bd4f290d8997d7c37628e8f3d40 60432 admin optional logcheck-database_1.2.37_all.deb 7ad622c61e77b262efbb2d12db0831f4 26874 admin optional logtail_1.2.37_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFCTyQQ4u3oQ3FHP2YRAvY1AKDGbqYSxrpwxtZaNSVdmqkHF2qqBgCgkbis 6xz/33sY3zVwcdoiax48wwk=VsgA -----END PGP SIGNATURE-----