Improvements to bind logcheck files.

2 files changed, 30 insertions, 18 deletions

diff --git a/logcheck/ignore.d.workstation/bind b/logcheck/ignore.d.workstation/bind
index 2502c15..72efd73 100644
--- a/logcheck/ignore.d.workstation/bind
+++ b/logcheck/ignore.d.workstation/bind
@@ -1 +1,3 @@
-named\[[0-9]+\]: ns_forw: sendto.*: Network is unreachable
+named\[[0-9]+\]: ns_forw: sendto\(\[[\.0-9]+\]\.[0-9]+\): Network is unreachable
+named\[[0-9]+\]: deleting interface \[[\.0-9]+\]\.[0-9]+
+named\[[0-9]+\]: listening on \[[\.0-9]+\]\.[0-9]+ \([^[:space:]+\)
diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local
index 2afe046..1294dec 100644
--- a/logcheck/ignore.d.workstation/local
+++ b/logcheck/ignore.d.workstation/local
@@ -16,18 +16,29 @@ anacron\[[0-9]+\]: Will run job `cron.(daily|weekly|monthly)' in (5|10|15) min\.
 anacron\[[0-9]+\]: Jobs will be executed sequentially
 anacron\[[0-9]+\]: Job `cron.(daily|weekly|monthly)' started
 anacron\[[0-9]+\]: Updated timestamp for job `cron.(daily|weekly|monthly)' to [0-9-]+
-### ignore.d.server/bind
-named\[[0-9]+\]: .*: query\(.*\) NS points to CNAME \(.*\)
-named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+
-named\[[0-9]+\]: .* All possible .* lame
-named\[[0-9]+\]: sysquery: query\(.*\) No possible A RRs
-named\[[0-9]+\]: client .*: transfer of '.*': AXFR started
-named\[[0-9]+\]: zone .*/IN: transfered serial [0-9]+
-named\[[0-9]+\]: transfer of '.*/IN' from .*: end of transfer
-named\[[0-9]+\]: zone .*/IN: sending notifies \(serial [0-9]+\)
-named\[[0-9]+\]: rcvd NOTIFY\(.*, IN, SOA\) from \[.*\]\.[0-9]+
-named\[[0-9]+\]: late CNAME in answer section for .*
-named\[[0-9]+\]: ns_forw: query\([\.0-9]+\.in-addr\.arpa\) Bogus LOOPBACK A RR \([^[:space:]]+:[\.0-9]+\) learnt \(A=[\.0-9]+:NS=[\.0-9]+\)
+### ignore.d.server/bind.changes
+named\[[0-9]+\]: Lame delegation
+named\[[0-9]+\]: Lame server on '[^[:space:]]+' \(in '[^[:space:]]+'\?\): \[[\.0-9]+\]\.[0-9]+ '[^[:space:]]+'$
+named\[[0-9]+\]: Response from
+named\[[0-9]+\]: reloading
+named\[[0-9]+\]: Cleaned cache of [0-9]+ RRsets$
+named\[[0-9]+\]: Sent NOTIFY for [^[:space:]]+$
+named\[[0-9]+\]: approved AXFR from [^[:space:]]+ for [^[:space:]]+$
+named\[[0-9]+\]: zone transfer \(AXFR\) of [^[:space:]]+ to [^[:space:]]+$
+named\[[0-9]+\]: suppressing duplicate notify$
+named\[[0-9]+\]: USAGE [0-9]+ [0-9]+ CPU=[\.0-9]+u/[\.0-9]+s CHILDCPU=[\.0-9]+u/[\.0-9]+s$
+named\[[0-9]+\]: NSTATS [0-9]+ [0-9]+( (A|CNAME|SOA|PTR|MX|TXT|AAAA|38|IXFR|AXFR|ANY)=[0-9]+)+$
+named\[[0-9]+\]: XSTATS [0-9]+ [0-9]+( (RR|RNXD|RFwdR|RDupR|RFail|RFErr|RErr|RAXFR|RLame|ROpts|SSysQ|SAns|SFwdQ|SDupQ|SErr|RQ|RIQ|RFwdQ|RDupQ|RTCP|SFwdR|SFail|SFErr|SNaAns|SNXD|RUQ|RURQ|RUXFR|RUUpd)=[0-9]+)+$
+named\[[0-9]+\]: lame server resolving '[^[:space:]]+' \(in '[^[:space:]]+'\?\): [\.0-9.]+#[0-9]+$
+named\[[0-9]+\]: Received NOTIFY answer
+named\[[0-9]+\]: (master|slave) zone "[^[:space:]]+" \(IN\) loaded \(serial [0-9]+\)$
+named\[[0-9]+\]: (ns_forw|ns_resp|sysquery): query\([^[:space:]]+\) (NS points to CNAME \([^[:space:]]+\)|No possible A RRs|All possible A RR's lame|Bogus LOOPBACK A RR \([^[:space:]]+\) learnt \([^[:space:]]+\))$
+named\[[0-9]+\]: client [\.0-9.]+#[0-9]+: transfer of '[^[:space:]]+/IN': AXFR started$
+named\[[0-9]+\]: zone [^[:space:]]+: transfered serial [0-9]+$
+named\[[0-9]+\]: transfer of '[^[:space:]]+' from [^[:space:]]+: end of transfer$
+named\[[0-9]+\]: zone [^[:space:]]+/IN: sending notifies \(serial [0-9]+\)$
+named\[[0-9]+\]: rcvd NOTIFY\([^[:space:]]+, IN, SOA\) from \[[\.0-9]+\]\.[0-9]+$
+named\[[0-9]+\]: late CNAME in answer section for [^[:space:]]+$
 ### ignore.d.server/bind.tmp
 named\[[0-9]+\]: zone .*: refresh: failure trying master .*: timed out
 named\[[0-9]+\]: client [\.0-9]+#[0-9]+: update forwarding denied
@@ -169,11 +180,8 @@ atalkd\[[0-9]\]: zip ignoring gnireply
 papd\[[0-9]\]: child [0-9]+ done
 papd\[[0-9]\]: child [0-9]+ for "[^[:space:]]+" from [\.0-9]+
 ### ignore.d.server/netsaint
-netsaint: SERVICE (ALERT|NOTIFICATION|FLAPPING ALERT): .*
 netsaint: Auto-save of retention data completed successfully\.
-netsaint: HOST ALERT:.*;DOWN;SOFT;.*;CRITICAL - Plugin timed out after 10 seconds
-netsaint: HOST ALERT:*;UP;SOFT;.*;PING OK - Packet loss = 0%, RTA =.*ms
-netsaint: SERVICE ALERT:.*;HTTP;CRITICAL;HARD;.*;Connection refused or timed out
+netsaint: (HOST|SERVICE) (ALERT|NOTIFICATION|FLAPPING ALERT): .*
 ### ignore.d.server/nfs-kernel-server
 mountd\[[0-9]+\]: NFS mount of /[^[:space:]]+ attempted from [\.0-9]+
 mountd\[[0-9]+\]: /[^[:space:]]+ has been mounted by [\.0-9]+
@@ -375,7 +383,9 @@ ipop3d\[[0-9]+\]: Mailbox is open by another process, access is readonly
 ipop3d\[[0-9]+\]: Trying to get mailbox lock from process [0-9]+
 ipop[2|3]d\[[0-9]+\]: (connect|pop3(s SSL)? service init) from [\.0-9]+
 ### ignore.d.workstation/bind
-named\[[0-9]+\]: ns_forw: sendto.*: Network is unreachable
+named\[[0-9]+\]: ns_forw: sendto\(\[[\.0-9]+\]\.[0-9]+\): Network is unreachable
+named\[[0-9]+\]: deleting interface \[[\.0-9]+\]\.[0-9]+
+named\[[0-9]+\]: listening on \[[\.0-9]+\]\.[0-9]+ \([^[:space:]+\)
 ### ignore.d.workstation/devfsd
 devfsd\[[0-9]+\]: Caught SIGHUP
 devfsd\[[0-9]+\]: read config file: "/etc/devfsd.conf"