update rules

[user/henk/code/puppet/modules/logcheck.git] / files / etc / logcheck / ignore.d.server / local-rsyslog

diff --git a/files/etc/logcheck/ignore.d.server/local-rsyslog b/files/etc/logcheck/ignore.d.server/local-rsyslog
index 0a29d5d4add74df8f4c07552f26eeafb11c1b990..951bd9c5319fdf0f9c941e1ae0410710ef3527e0 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-rsyslog
+++ b/files/etc/logcheck/ignore.d.server/local-rsyslog
@@ -1 +1,3 @@
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' \(fd 3\) from systemd\.  \[v[[:digit:].]+\]$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] rsyslogd was HUPed$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] start$