I'd like to suppress the following messages (routinely generated by my
CD drive) from logcheck output.
May 20 11:04:36 floo kernel: [162262.729339] end_request: I/O error, dev sr0,
sector 0
May 20 11:04:36 floo kernel: [162262.739338] end_request: I/O error, dev sr0,
sector 0
May 20 11:26:11 floo kernel: [163558.119548] end_request: I/O error, dev sr0,
sector 0
May 20 11:26:11 floo kernel: [163558.128832] end_request: I/O error, dev sr0,
sector 0
May 20 11:34:34 floo kernel: [164060.734851] end_request: I/O error, dev sr0,
sector 0
May 20 11:34:34 floo kernel: [164060.744896] end_request: I/O error, dev sr0,
sector 0
This is the latest unsuccessful variation of an ignore line that I've
tried, even though the egrep test matches all the lines that are
showing up in the logcheck mails.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: \[[ 0-9.]+\] end_request: I.O error,
dev sr.*, sector.*$
$ egrep '^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: \[[ 0-9.]+\]
end_request: I.O error, dev sr.*, sector.*$' /var/log/syslog
[returns all the lines shown above]
Any suggestions?
Thanks,
Adam
Adam Funk <a24061 at ducksburg.com> wrote:> May 20 11:04:36 floo kernel: [162262.729339] end_request: I/O error, dev sr0, sector 0There's a specific rule flagging that message in violations.d/kernel. If you want to get rid of it, you'll have to either remove that rule, or copy it to violations.ignore.d/local-kernel. -- <SomeLamer> what's the difference between chattr and chmod? <SomeGuru> SomeLamer: man chattr > 1; man chmod > 2; diff -u 1 2 | less -- Seen on #linux on irc
On 2009-07-18, Fr?d?ric Bri?re wrote:> Adam Funk <a24061 at ducksburg.com> wrote: >> May 20 11:04:36 floo kernel: [162262.729339] end_request: I/O error, dev sr0, sector 0 > > There's a specific rule flagging that message in violations.d/kernel. > If you want to get rid of it, you'll have to either remove that rule, or > copy it to violations.ignore.d/local-kernel.(Sorry for the delay in replying. I don't burn CDs and DVDs very often.) I've copied it to 'violations.ignore.d/local-kernel' and the error still pops up. I'll try commenting it out in 'violations.d/kernel' next. Here's what I don't understand: I have a file named '/etc/logcheck/custom-ignore' that is symlinked into all the other '/etc/logcheck/*ignore*' directories. Most of the time I can suppress an unwanted message by adding it to that "master file", but sometimes it doesn't work and I have to make a special file for it. Why?