From 41277caf50e9adde183220d366178f2f99653a99 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Hendrik=20J=C3=A4ger?= Date: Thu, 30 Nov 2023 11:35:45 +0100 Subject: [PATCH] update rules --- .../etc/logcheck/ignore.d.server/local-auditd | 2 +- .../etc/logcheck/ignore.d.server/local-kernel | 141 ++++++++++++------ files/etc/logcheck/ignore.d.server/local-lvm | 5 +- .../logcheck/ignore.d.server/local-rsyslog | 2 + .../logcheck/ignore.d.server/local-systemd | 4 +- 5 files changed, 103 insertions(+), 51 deletions(-) diff --git a/files/etc/logcheck/ignore.d.server/local-auditd b/files/etc/logcheck/ignore.d.server/local-auditd index e872a32..8766833 100644 --- a/files/etc/logcheck/ignore.d.server/local-auditd +++ b/files/etc/logcheck/ignore.d.server/local-auditd @@ -5,7 +5,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: backlog_wait_time_actual 0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: enabled 1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: failure 1$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Init complete, auditd 3.0 listening for events \(startup state enable\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Init complete, auditd [[:digit:].]+ listening for events \(startup state enable\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: lost 0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: No plugins found, not dispatching events$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: No rules$ diff --git a/files/etc/logcheck/ignore.d.server/local-kernel b/files/etc/logcheck/ignore.d.server/local-kernel index d47590b..b6482ab 100644 --- a/files/etc/logcheck/ignore.d.server/local-kernel +++ b/files/etc/logcheck/ignore.d.server/local-kernel @@ -1,32 +1,13 @@ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] USB Video Class driver \(1\.1\.1\)$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] lp: driver loaded but no devices found$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c /dev entries driver$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'pkcs8' registered$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] loop: module loaded$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem with ordered data mode\. Opts: acl$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): re-mounted\. Opts: acl,errors=remount-ro$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: Core ver 2\.22$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI device and connection manager initialized$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI socket layer initialized$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: L2CAP socket layer initialized$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: SCO socket layer initialized$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: chip id 63$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: features 0x07$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A1 \(001\.002\.014\) build 0000$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP \(Ethernet Emulation\) ver 1\.3$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP filters: protocol multicast$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP socket layer initialized$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initializing XFRM netlink socket ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 00:0[[:digit:]]: ttyS[[:digit:]] at I/O 0x[[:digit:]]f8 \(irq = [[:digit:]], base_baud = 115200\) is a 16550A$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 8021q: 802.1Q VLAN Support v1.8$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] 8021q: adding VLAN 0 to HW filter on device [[:alnum:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Added _OSI.*$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: (APIC|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|RSDP|RSDT|SSDT|TPM2|UEFI|XSDT)( 0x[[:xdigit:]]+ [[:xdigit:]]+( \(v[[:digit:]]+ .*\))?)?$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: TCPA 0x[[:xdigit:]]+ 000032 \(v02 COREv4 COREBOOT 00000000 CORE 20200110\) ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type PCI registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: bus type USB registered$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRB\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Power Button \[PWRF\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( button)? Sleep Button \[SLPB\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Core revision [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi_cpufreq: overriding BIOS provided _PSD data$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: [[:digit:]] ACPI AML tables successfully acquired and loaded$ @@ -46,26 +27,31 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Local APIC address 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Low-level resume complete$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Interrupt Link \[(INT|LNK)[[:alpha:]]\] \(IRQs [[:digit:][:space:]*]+\)( [[:digit:]*]+)?(, disabled\.)?$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI: Interrupt link (LNKA|LNKB|LNKC|LNKD|LNKS) configured for IRQ [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PCI Root Bridge \[PCI0\] \(domain 0000 \[bus 00-[[:xdigit:]]+\]\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpiphp: Slot \[[[:digit:]]+\] registered$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI:( PM:)? \(supports( S[[:digit:]])+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: PM-Timer IO Port: 0x[[:xdigit:]]+V?$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS supports \[ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS now controls \[PCIeHotplug SHPCHotplug PME AER PCIeCapability LTR\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Button \[PWRB\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Button \[PWRF\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] acpi PNP0A0[[:digit:]]:00: _OSC: OS supports \[(ExtendedConfig )?ASPM ClockPM Segments MSI HPX-Type3\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Power Resource \[(FN[[:digit:]]+|PG[[:digit:]]+|WRST|FPWR)\] \((off|on)\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \\_PR_\.CPU0: _OSC native thermal LVT Acked$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Preparing to enter system sleep state S3$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \\_PR_\.P[[:digit:]]+: Found 2 idle states$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Reserving (APIC|ASF!|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|SSDT|TCPA|TPM2|UEFI) table memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Sleep Button \[SLPB\]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \(supports( S[[:digit:]])+\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Reserving (APIC|ASF!|DBG2|DBGP|DMAR|DSDT|FACP|FACS|FIDT|FPDT|HEST|HPET|IVRS|LPIT|MCFG|OEMB|SRAT|SSDT|TCPA|TPM2|UEFI|WAET) table memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: \_SB_\.(LNKC|LNKD): Enabled at IRQ [[:digit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT 0x[[:xdigit:]]+ 000110 \(v01 BOCHS BXPC 00000001 BXPC 00000001\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT: Node 0 PXM 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: SRAT: Node 0 PXM 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] hotplug$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: TCPA 0x[[:xdigit:]]+ 000032 \(v02 COREv4 COREBOOT 00000000 CORE 20200110\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Thermal Zone \[TZ[[:digit:]]+\] \([[:digit:]]+ C\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\]( ACPI:)? Using ACPI \(MADT\) for SMP configuration information$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Using IOAPIC for interrupt routing$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Video Device \[GFX0\] \(multi-head: yes rom: no post: no\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: WAET 0x[[:xdigit:]]+ 000028 \(v01 BOCHS BXPC 00000001 BXPC 00000001\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ACPI: Waking up from system sleep state S3$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Adding [[:digit:]]+k swap on [^.]+\. Priority:-2 extents:1 across:[[:digit:]]+k (SS)?FS$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Adding [[:digit:]]+k swap on [^.]+\. Priority:-2 extents:1 across:[[:digit:]]+k( (SS)?FS)?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AES CTR mode by8 optimization enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AGP: Checking aperture\.\.\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AGP: No AGP bridge found$ @@ -73,7 +59,8 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: AHCI 0001.[[:digit:]]+ 32 slots [[:digit:]] ports [[:digit:]] Gbps 0x[[:xdigit:]]+ impl SATA mode$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: flags: .*$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ahci 0000:00:[[:xdigit:]]+.[[:digit:]]: version 3.0$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]_]+ 0000:0[[:digit:]]:[[:xdigit:]]{2}\.[[:xdigit:]] [[:alnum:]]+: renamed from [[:alnum:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] alg: self-tests for CTR-KDF \(hmac\(sha256\)\) passed$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]_]+ (0000:0[[:digit:]]:[[:xdigit:]]{2}\.[[:xdigit:]]|virtio[[:digit:]]) [[:alnum:]]+: renamed from [[:alnum:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: associate with [[:xdigit:]:]+ \(try [[:digit:]]/3\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: authenticate with [[:xdigit:]:]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] [[:alnum:]]+: authenticate with [[:xdigit:]:]+$ @@ -90,6 +77,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor Filesystem Enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AppArmor: AppArmor sha1 policy hashing enabled$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'pkcs8' registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Asymmetric key parser 'x509' registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] async_tx: api initialized \(async\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] at24 0-[[:digit:]]+: 256 byte spd EEPROM, read-only$ @@ -103,7 +91,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:].]+: disabling queued TRIM support$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: DUMMY$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:].]+: Enabling discard_zeroes_data$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max MWDMA2 cmd 0x[[:xdigit:]]+ ctl 0x376 bmdma 0x[[:xdigit:]]+ irq [[:digit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max MWDMA2 cmd 0x[[:xdigit:]]+ ctl 0x[[:xdigit:]]+ bmdma 0x[[:xdigit:]]+ irq [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: PATA max UDMA/100 cmd 0x[[:xdigit:]]+ ctl 0x3f6 bmdma 0xff00 irq [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: SATA link down \(SStatus 0 SControl 300\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ata[[:digit:]]: SATA link up [[:digit:].]+ Gbps \(SStatus [[:digit:]]+ SControl 300\)$ @@ -118,17 +106,31 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ath: EEPROM regdomain: 0x0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ath: Regpair used: 0x3a$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ATOM BIOS: ATI$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: initializing netlink subsys \(disabled\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: type=1400 audit\([[:digit:].:]+\): apparmor="STATUS" operation="profile_load" profile="unconfined" .*$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] audit: type=2000 audit\([[:digit:].:]+\): state=initialized audit_enabled=0 res=1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AVX2 version of gcm_enc/dec engaged.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] AVX version of gcm_enc/dec engaged.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] ACPI data$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] ACPI NVS$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] usable$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] type 16$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-e820: \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] usable$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BIOS-provided physical RAM map:$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. bit width: 48$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Block layer SCSI generic \(bsg\) driver version 0.4 loaded \(major [[:digit:]]+\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP \(Ethernet Emulation\) ver 1\.3$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP filters: protocol multicast$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: BNEP socket layer initialized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: Core ver 2\.22$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM20702A1 \(001\.002\.014\) build 0000$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: chip id 63$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: hci0: BCM: features 0x07$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI device and connection manager initialized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: HCI socket layer initialized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: L2CAP socket layer initialized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Bluetooth: SCO socket layer initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] BOOT_IMAGE=/vmlinuz-.*$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Booting paravirtualized kernel on bare hardware$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Booting paravirtualized kernel on KVM$ @@ -139,8 +141,11 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Calibrating delay loop \(skipped\) preset value.. [[:digit:].]+ BogoMIPS \(lpj=[[:digit:]]+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Calibrating delay loop \(skipped\), value calculated using timer frequency.. [[:digit:].]+ BogoMIPS \(lpj=[[:digit:]]+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] caller pci_map_rom\+0x[[:xdigit:]]+/0x[[:xdigit:]]+ mapping multiple BARs$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cblist_init_generic: Setting adjustable number of callback queues\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cblist_init_generic: Setting shift to 2 and lim to 1\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ccp 0000:00:[[:xdigit:]]+.0: ccp enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ccp 0000:00:[[:xdigit:]]+.0: [[:digit:]] command queues available$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cdrom: Uniform CD-ROM driver Revision: 3.20$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cfg80211: Loaded X.509 cert .*$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] cfg80211: Loading compiled-in X.509 certificates for regulatory database$ @@ -159,7 +164,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Detected use of extended apic ids on hypertransport bus$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[ *[[:digit:]]+\.[[:digit:]]+\])? device [[:alnum:].]+ (entered|left) promiscuous mode$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Device empty$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: ioctl: 4.43.0-ioctl \(2020-10-01\) initialised: dm-devel@redhat.com$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: ioctl: [[:alnum:].-]+ \([[:digit:]-]+\) initialised: dm-devel@redhat.com$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] device-mapper: uevent: version 1.0.3$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] devtmpfs: initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ( #[[:digit:]])+$ @@ -180,9 +185,10 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMAR: RMRR base: 0x[[:xdigit:]]+ end: 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: LENOVO 2325CT4/2325CT4, BIOS CBET4000 4.12-375-g7729b29a58 05/28/2020$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MICRO-STAR INTERANTIONAL CO\.,LTD MS-7368/MS-7368, BIOS V1\.5B2 10/31/2007$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MSI MS-7816/H87-G43 \(MS-7816\), BIOS V2\.14B15 05/20/2019$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: PC Engines apu2/apu2, BIOS v4\.11\.0\.1 12/09/2019$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: QEMU Standard PC \(i440FX + PIIX, 1996\), BIOS 1.16.2-debian-1.16.2-1 04/01/2014$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: System manufacturer System Product Name/P8H67-M PRO, BIOS 9005 09/18/2018$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] DMI: MSI MS-7816/H87-G43 \(MS-7816\), BIOS V2\.14B15 05/20/2019$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] done\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] Connector [[:digit:]]:$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] CRT1: INTERNAL_KLDSCP_DAC1$ @@ -208,6 +214,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] SVIDEO-1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] TV1: INTERNAL_KLDSCP_DAC1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[drm\] VGA-1$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Dynamic Preempt: voluntary$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 0000:00:1f\.6 \(uninitialized\): registered PHC clock$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 [[:alnum:]]+: Intel\(R\) PRO/1000 Network Connection$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] e1000e 0000:00:1f\.6 [[:alnum:]]+: MAC: 12, PHY: 12, PBA No: FFFFFF-0FF$ @@ -241,8 +248,23 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ehci-pci 0000:00:[[:xdigit:]]+\.[[:digit:]]: USB 2.0 started, EHCI 1.00$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ehci-pci: EHCI PCI platform driver$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. event mask: [[:xdigit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: HMAC attrs: 0x1$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: Initialising EVM extended attributes:$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.apparmor$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.capability$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.ima$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.selinux$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64 \(disabled\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64EXEC \(disabled\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64MMAP \(disabled\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] evm: security.SMACK64TRANSMUTE \(disabled\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem with ordered data mode\. (Opts: (none|acl)|Quota mode: none\.)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounted filesystem without journal\. Quota mode: none\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): mounting ext2 file system using the ext4 subsystem$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] EXT4-fs \([[:alnum:]-]+\): re-mounted\. (Opts: acl,errors=remount-ro|Quota mode: none\.)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] f71882fg f71882fg.1536: Fan: [[:digit:]] is in duty-cycle mode$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] f71882fg: Found f71882fg chip at 0x600, revision 32$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Fallback order for Node 0: 0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fbcon: i915drmfb \(fb0\) is primary device$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Filesystems sync: [[:digit:].]+ seconds$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. fixed-purpose events: [[:digit:]]$ @@ -259,7 +281,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] FS-Cache: Netfs 'nfs' registered for caching$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ftrace: allocated [[:digit:]]+ pages with [[:digit:]]+ groups$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ftrace: allocating [[:digit:]]+ entries in [[:digit:]]+ pages$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fuse: init \(API version 7.32\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] fuse: init \(API version 7.[[:digit:]]+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] futex hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. generic registers: [[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] generic_sse : [[:digit:]]+ MB/sec$ @@ -271,8 +293,10 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hpet0: [[:digit:]] comparators, (64|32)-bit [[:digit:].]+ MHz counter$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hub [[:digit:]]-[[:digit:]]:1.0: [[:digit:]]+ ports detected$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] hub [[:digit:]]-[[:digit:]]:1.0: USB hub found$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB registered [[:digit:]]+.00 [MG]iB page size, pre-allocated 0 pages$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB: [[:digit:]]+ KiB vmemmap can be freed for a [[:digit:]]+\.00 [MG]iB page$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] HugeTLB:? registered [[:digit:]]+.00 [MG]iB page size, pre-allocated 0 pages$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Hypervisor detected: KVM$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c /dev entries driver$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c i2c-0: [[:digit:]]/4 memory slots populated \(from DMI\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i2c i2c-0: Successfully instantiated SPD at 0x5[[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] i801_smbus 0000:00:1f\.[[:digit:]]: enabling device \(0001 -> 0003\)$ @@ -299,8 +323,10 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb 0000:0[[:digit:]]:00\.0: Using MSI-X interrupts. 4 rx queue\(s\), 4 tx queue\(s\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb: Copyright \(c\) 2007-2014 Intel Corporation\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] igb: Intel\(R\) Gigabit Ethernet Network Driver$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ima: Allocated hash algorithm: sha256$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] /init$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initialise system trusted keyrings$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initializing XFRM netlink socket ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Initmem setup node 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Inode-cache hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input[[:digit:]]$ @@ -317,8 +343,9 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: PRP0001:00 as /devices/pci0000:00/PRP0001:00/input/input[[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input[[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input[[:digit:]]$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] In-situ OAM \(IOAM\) with IPv6$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Installing knfsd \(copyright \(C\) 1996 okir@monad\.swb\.de\)\.$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: Platform Keyring initialized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] integrity: (Platform|Machine) Keyring initialized$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: Local APIC timer is reliable in all C-states$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: MWAIT substates: 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_idle: v0.5.1 model 0x[[:xdigit:]]+$ @@ -332,6 +359,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] intel_rapl_common: Found RAPL domain uncore$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IOAPIC\[[[:digit:]]\]: apic_id [[:digit:]]+, version [[:digit:]]+, address 0x[[:xdigit:]]+, GSI [[:digit:]]+-[[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iommu: Default domain type: Translated$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] iommu: DMA domain TLB invalidation policy: lazy mode$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] io scheduler mq-deadline registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IP idents hash table entries: [[:digit:]]+ \(order: [[:digit:]]+, [[:digit:]]+ bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] IPI shorthand broadcast: enabled$ @@ -348,26 +376,33 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Kernel/User page tables isolation: enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type asymmetric registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type blacklist registered$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type encrypted registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type fscrypt-provisioning registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type ._fscrypt registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Key type .fscrypt registered$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Kprobes globally optimized$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kprobes: kprobe jump-optimization is enabled\. All kprobes are optimized if possible\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: cpu [[:digit:]], msr [[:xdigit:]]+, (primary|secondary) cpu clock$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: Using msrs [[:xdigit:]]+ and [[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-clock: using sched offset of [[:digit:]]+ cycles$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: KVM setup pv remote TLB flush$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: PV spinlocks enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: setup PV IPIs$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: setup PV sched yield$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm-guest: stealtime: cpu [[:digit:]], msr [[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] kvm: Nested Virtualization enabled$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Last level (dTLB|iTLB) entries: 4KB [[:digit:]]+, 2MB [[:digit:]]+, 4MB [[:digit:]]+, 1GB [[:digit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] landlock: Up and running\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Last level (dTLB|iTLB) entries: 4KB [[:digit:]]+, 2MB [[:digit:]]+, 4MB [[:digit:]]+(, 1GB [[:digit:]]+)?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] last_pfn = 0x[[:xdigit:]]+ max_arch_pfn = 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ledtrig-cpu: registered to indicate activity on CPUs$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Linux agpgart interface v0.103$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Linux version .*$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Loaded X.509 cert '.*'$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Loading compiled-in X.509 certificates$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] loop: module loaded$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] lp: driver loaded but no devices found$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LSM: Security Framework initializing$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LSM support for eBPF active$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] LVT offset [[:digit:]] assigned for vector 0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. max period: [[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mce: CPU0: Thermal monitoring enabled \(TM1\)$ @@ -375,9 +410,10 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mc: Linux media interface: v0.10$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] md[[:digit:]]+: detected capacity change from 0 to [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] md/raid1:md[[:digit:]]+: active with 2 out of 2 mirrors$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MDS: Mitigation: Clear CPU buffers$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mei_me 0000:00:16.0: enabling device \(0000 -> 0002\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] available for PCI devices$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mem auto-init: stack:off, heap alloc:on, heap free:off$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mem auto-init: stack:(off|all\(zero\)), heap alloc:on, heap free:off$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Memory: [[:digit:]]+K/[[:digit:]]+K available \([[:digit:]]+K kernel code, [[:digit:]]+K rwdata, [[:digit:]]+K rodata, [[:digit:]]+K init, [[:digit:]]+K bss, [[:digit:]]+K reserved, 0K cma-reserved\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] microcode: CPU[[:digit:]]: patch_level=0x[[:xdigit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] microcode: microcode updated early to revision 0x[[:xdigit:]]+, date = [[:digit:]-]+$ @@ -388,6 +424,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mousedev: PS/2 mouse device common for all mice$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Movable zone start for each node$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mpls_gso: MPLS GSO support$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MPTCP token hash table entries: 2048 \(order: 3, 49152 bytes, linear\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] mtrr: corrected configuration.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: uncachable$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] MTRR default type: write-back$ @@ -398,6 +435,12 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel: Initializing$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NetLabel: unlabeled traffic allowed by default$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_INET6 protocol family$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_INET protocol family$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_NETLINK/PF_ROUTE protocol family$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_PACKET protocol family$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_UNIX/PF_LOCAL protocol family$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NET: Registered PF_XDP protocol family$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] nfsd: last server has exited, flushing export cache$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NFSD: starting 90-second grace period \(net [[:xdigit:]]+\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NFSD: Using UMH upcall client tracking operations\.$ @@ -415,6 +458,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] (Normal|DMA(32)?) zone: [[:digit:]]+ pages used for memmap$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Normal empty$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NR_IRQS: 524544, nr_irqs: [[:digit:]]+, preallocated irqs: [[:digit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NUMA: Node 0 \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] + \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] -> \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] NX \(Execute Disable\) protection: active$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ohci_hcd: USB 1.1 'Open' Host Controller \(OHCI\) Driver$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] ohci-pci 0000:00:13.[[:digit:]]: irq [[:digit:]]+, io mem 0x[[:xdigit:]]+$ @@ -450,7 +494,6 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: Intel PCH root port ACS workaround enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: legacy IDE quirk: reg 0x[[:xdigit:]]+: \[io 0x[[:xdigit:]]+(-0x[[:xdigit:]]+)?\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: Limiting direct PCI/PCI transfers$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI host bridge to bus 0000:00$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PCI bridge to \[bus [[:digit:]-]+\]( \(subtractive decode\))?$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PIIX3: Enabling Passive Release$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pci 0000:0[[:xdigit:]]:[[:xdigit:].]+: PME# supported from .*$ @@ -478,6 +521,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:]]+\.[[:digit:]]: Intel PCH root port ACS workaround enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:].]+: pciehp: Slot #0 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug\+ Surprise\+ Interlock- NoCompl\+ IbPresDis- LLActRep\+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] pcieport 0000:00:[[:xdigit:].]+: PME: Signaling with IRQ [[:digit:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI host bridge to bus 0000:00$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI Interrupt Link \[LNK[CD]\] enabled at IRQ [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI: MMCONFIG at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved in ACPI motherboard resources$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] PCI: MMCONFIG at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] reserved in E820$ @@ -560,10 +604,11 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp0-core 2\^-14 Joules$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] RAPL PMU: hw unit of domain pp1-gpu 2\^-14 Joules$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=[[:digit:]]$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Hierarchical RCU implementation\.$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Hierarchical SRCU implementation\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: Max phase no-delay instances is 1000\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu:( Preemptible)? Hierarchical (SRCU|RCU) implementation\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=[[:digit:]]\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] rcu: srcu_init: Setting srcu_struct sizes based on contention\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] registered taskstats version 1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel:( \[ *[[:digit:]]+\.[[:digit:]]+\])? Rekeying PTK for STA [[:xdigit:]:]+ but driver can't safely do that\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Reserving Intel graphics memory at \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\]$ @@ -600,6 +645,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] serio: i8042 (KBD|AUX) port at 0x60,0x64 irq [[:digit:]]+$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:[[:digit:]] nr_cpu_ids:[[:digit:]] nr_node_ids:1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] signal: max sigframe size: 1776$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=[[:digit:]], Nodes=1$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SMBIOS [[:digit:].]+ present\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smpboot: Allowing [[:digit:]]+ CPUs, 0 hotplug CPUs$ @@ -610,6 +656,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smpboot: Total of [[:digit:]]+ processors activated \([[:digit:].]+ BogoMIPS\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smp: Bringing up secondary CPUs \.\.\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] smp: Brought up 1 node, [[:digit:]] CPUs$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] software IO TLB: area num 4\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] software IO TLB: mapped \[mem 0x[[:xdigit:]]+-0x[[:xdigit:]]+\] \(64MB\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sp5100_tco: SP5100/SB800 TCO WatchDog Timer Driver$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sp5100-tco sp5100-tco: initialized. heartbeat=60 sec \(nowayout=0\)$ @@ -617,6 +664,7 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: Attached scsi CD-ROM sr0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: \[sr0\] scsi3-mmc drive: 204x/204x writer dvd-ram cd/rw xa/form2 cdda tray$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] sr 4:0:0:0: \[sr0\] scsi3-mmc drive: 306x/306x writer dvd-ram cd/rw xa/form2 cdda tray$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SRAT: PXM 0 -> APIC 0x0[[:digit:]] -> Node 0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SSE version of gcm_enc/dec engaged.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging disabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] SVM: kvm: Nested Paging enabled$ @@ -667,22 +715,23 @@ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: Product: OHCI PCI host controller$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: Product: xHCI Host Controller$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] usb usb[[:digit:]]+: SerialNumber: [[:xdigit:]:.-]+$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Using ACPI \(MADT\) for SMP configuration information$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] USB Video Class driver \(1\.1\.1\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Using GB pages for direct mapping$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. value mask: 0000ffffffffffff$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] \.\.\. version: [[:digit:]]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] VFS: Disk quotas dquot_6.6.0$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] VFS: Dquot-cache hash table entries: 512 \(order 0, 4096 bytes\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] vgaarb: loaded$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: [vda] 41910272 512-byte logical blocks \(21.5 GB/20.0 GiB\)$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: 4/0/0 default/read/poll queues$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] virtio_blk virtio1: \[vda\] 41910272 512-byte logical blocks \(21.5 GB/20.0 GiB\)$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] with arguments:$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] with environment:$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] workingset: timestamp_bits=36 max_order=[[:digit:]]+ bucket_order=0$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Write protecting the kernel read-only data: 22528k$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] Write protecting the kernel read-only data: [[:digit:]]+k$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x2apic enabled$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x2apic: IRQ remapping doesn't support X2APIC mode$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86: Booting SMP configuration:$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/cpu: User Mode Instruction Prevention (UMIP) activated$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/cpu: User Mode Instruction Prevention \(UMIP\) activated$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Enabled xstate features 0x3, context size is 576 bytes, using 'compacted' format.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ kernel: \[ *[[:digit:]]+\.[[:digit:]]+\] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'$ diff --git a/files/etc/logcheck/ignore.d.server/local-lvm b/files/etc/logcheck/ignore.d.server/local-lvm index 735d7ad..6fc5254 100644 --- a/files/etc/logcheck/ignore.d.server/local-lvm +++ b/files/etc/logcheck/ignore.d.server/local-lvm @@ -1,3 +1,4 @@ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: [[:digit:]]+ logical volume\(s\) in volume group "[[:alnum:]-]+" monitored$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: pvscan\[[[:digit:]]+\] PV [^[:space:]]+ online, VG [[:alnum:]-]+ is complete\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]:[[:space:]]+[[:digit:]]+ logical volume\(s\) in volume group "[[:alnum:]-]+" monitored$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]:( pvscan\[[[:digit:]]+\])? PV [^[:space:]]+ online, VG [[:alnum:]-]+ is complete\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: pvscan\[[[:digit:]]+\] VG [[:alnum:]-]+ skip autoactivation\.$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ lvm\[[[:digit:]]+\]: VG [[:alnum:]-]+ finished$ diff --git a/files/etc/logcheck/ignore.d.server/local-rsyslog b/files/etc/logcheck/ignore.d.server/local-rsyslog index 0a29d5d..951bd9c 100644 --- a/files/etc/logcheck/ignore.d.server/local-rsyslog +++ b/files/etc/logcheck/ignore.d.server/local-rsyslog @@ -1 +1,3 @@ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' \(fd 3\) from systemd\. \[v[[:digit:].]+\]$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] rsyslogd was HUPed$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ rsyslogd:[[:space:]]+\[origin software="rsyslogd" swVersion="[[:digit:].]+" x-pid="[[:digit:]]+" x-info="https://www.rsyslog.com"\] start$ diff --git a/files/etc/logcheck/ignore.d.server/local-systemd b/files/etc/logcheck/ignore.d.server/local-systemd index 23009ef..f3be76e 100644 --- a/files/etc/logcheck/ignore.d.server/local-systemd +++ b/files/etc/logcheck/ignore.d.server/local-systemd @@ -1,5 +1,5 @@ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activated swap [^[:space:]]+$ -^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activating swap [^[:space:]]+$ +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activated swap +^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: Activating swap ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]@-]+\.service: Consumed [[:digit:].]+s CPU time\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]-]+\.socket: Succeeded\.$ ^(\w{3} [ :0-9]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: [[:alnum:]_-]+\.timer: Succeeded\.$ -- 2.39.5