Ubuntu 12.04 logcheckで検出されるエラーを少し見直す。

logcheckは本当によく働いてくれる。だけど、これは問題ないのでは？と思うものも報告されて、本来気にしなきゃならないメッセージを見落としてます。

ということで、以下のファイルを作成してみた。

/etc/logcheck/ignore.d.server/original

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: if [._[:alnum:]-]+ IN A rrset doesn't exist and [._[:alnum:]-]+ IN AAAA rrset doesn't exist delete [._[:alnum:]-]+ IN TXT "[[:alnum:]]+": success\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPDISCOVER from [:[:alnum:]]+ (\([._ [:alnum:]-]+\) |)via [._[:alnum:]-]+(: load balance to peer [._[:alnum:]-]+)?$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPOFFER on [.0-9]{7,15} to [:[:alnum:]]+ (\([._ [:alnum:]-]+\) |)via [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPREQUEST for [.0-9]{7,15} (\([.0-9]{7,15}\) |)from [:[:alnum:]]+ (\([._ [:alnum:]-]+\) )?via [._[:alnum:]-]+(: load balance to peer [._[:alnum:]-]+\.?|: lease owned by peer\.?|: wrong network\.?|: lease [.0-9]{7,15} unavailable\.?)?$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPACK on [.0-9]{7,15} to [:[:alnum:]]+ (\([._ [:alnum:]-]+\) |)via [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPNAK on [.0-9]{7,15} to [:[:alnum:]]+ (\([._ [:alnum:]-]+\) |)via [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd: DHCPRELEASE of [.0-9]{7,15} from [:[:alnum:]]+ (\([._ [:alnum:]-]+\) |)via [._[:alnum:]-]+ \((not |)found\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd(-2\.2\.x|): BOOTREPLY (for|on) [.0-9]{7,15} to [:_[:alnum:]]+ (\([:._[:alnum:]-]+\) )?via [._[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: control_finish: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: start_pppd: I'm running:$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: \".*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: Call established with .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: result_code_avp: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: Terminating pppd: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: result_code_avp: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: control_finish: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ xl2tpd\[[[:digit:]]{1,5}\]: Can not find tunnel .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dbus\[[[:digit:]]{1,5}\]: \[system\] Rejected send message, .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ NetworkManager\[[[:digit:]]{1,5}\]:    SCPlugin-Ifupdown: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pppd\[[[:digit:]]{1,5}\]: found interface .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pppd\[[[:digit:]]{1,5}\]: local  IP address .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pppd\[[[:digit:]]{1,5}\]: remote IP address .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pppd\[[[:digit:]]{1,5}\]: Terminating on signal 15$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[[:digit:]]{1,5}\]: Withdrawing workstation service for .*$

少し落ち着いた。