The ssmtp package is a lightweight SMTP agent for systems which don't need a
full blown MTA. These log entries are for successful connections which
don't
need to fill up the logcheck reports. Here's the relevant log entries to be
ignored:
Mar 6 22:02:09 tiny sSMTP[11122]: Creating SSL connection to host
Mar 6 22:02:10 tiny sSMTP[11122]: SSL connection using DHE-RSA-AES256-SHA
Mar 6 22:02:12 tiny sSMTP[11122]: Sent mail for logcheck at removed.com (221
2.0.0 smtp.removed.com closing connection) uid=115 username=logcheck
outbytes=1429
Here are my rules:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: Creating SSL connection to
host$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: SSL connection using
[-[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: Sent mail for +*$
Thanks,
Jonathan Skanes