update rules

diff --git a/files/etc/logcheck/ignore.d.server/local-rpcmountd b/files/etc/logcheck/ignore.d.server/local-rpcmountd
index 4d500467665a721702b440062d59fccdf1f585fb..94c6c6dceb2f549d6a13108a1ede3af37afd69a7 100644 (file)
--- a/files/etc/logcheck/ignore.d.server/local-rpcmountd
+++ b/files/etc/logcheck/ignore.d.server/local-rpcmountd
@@ -1,4 +1,5 @@
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: Version [[:digit:].]+ starting$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: authenticated mount request from [[:xdigit:].:]+ for [^[:space:]]+ \([^[:space:]]+\)$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: Caught signal 15, un-registering and exiting\.$
-^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: v[[:digit:].]+ client detached: 0x[[:xdigit:]]{16} from "[[:xdigit:].:]+"$
 ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: v[[:digit:].]+ client attached: 0x[[:xdigit:]]{16} from "[[:xdigit:].:]+"$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: v[[:digit:].]+ client detached: 0x[[:xdigit:]]{16} from "[[:xdigit:].:]+"$
+^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rpc\.mountd\[[[:digit:]]+\]: Version [[:digit:].]+ starting$