After migrating to stretch, I can't get rid of certain message via logcheck. This one:
Code: Select all
Jul 17 06:25:03 host liblogging-stdlog: [origin software="rsyslogd" swVersion="8.24.0" x-pid="326" x-info="http://www.rsyslog.com"] rsyslogd was HUPed
Code: Select all
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ liblogging-stdlog: \[origin software="rsyslogd" swVersion="[0-9.]+" x-pid="[[:digit:]]+"x-info="http:\/\/www\.rsyslog\.com"\] rsyslogd was HUPed$
Code: Select all
# logcheck-test -l /var/log/messages liblogging-stdlog
Jul 17 06:25:04 host liblogging-stdlog: [origin software="rsyslogd" swVersion="8.24.0" x-pid="326" x-info="http://www.rsyslog.com"] rsyslogd was HUPed
================================================================================
parsed file: /var/log/messages
used rule: 'liblogging-stdlog'
Any ideas / help appreciated!