From df32ed1cfac53a66e1712105c832ccd29238c30c Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 30 Mar 2016 15:16:03 +0000 Subject: [PATCH] Tweak epylog weed rules some more. Add a few and make some more general. --- roles/epylog/files/merged/weed_local.cf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/roles/epylog/files/merged/weed_local.cf b/roles/epylog/files/merged/weed_local.cf index 83aae40555..db8ed0706b 100644 --- a/roles/epylog/files/merged/weed_local.cf +++ b/roles/epylog/files/merged/weed_local.cf @@ -293,8 +293,9 @@ sshd.*: Disconnecting: Too many authentication failures.* sshd.*: Disconnected from.* sshd.*: Read error from remote host.* sshd.*: error: maximum authentication attempts exceeded for.* -sshd.*: Close session.*user root from 10.5.126.23 port 60755 id 0 +sshd.*: Close session.*user root from 10.5.126.23 port.*id 0 sshd.*: error: key_read: uudecode.*failed +sshd.*: Connection reset by.* stunnel:.*connected remote.* stunnel:.*SSL_read.* stunnel:.*Connection reset.* @@ -302,6 +303,7 @@ stunnel:.*connect_blocking.* stunnel:.*Connection closed.* stunnel:.*Service \[websockets\] accepted connection from.* stunnel:.*Service \[eventsource\] accepted connection from.* +stunnel: .*SSL_accept\: Peer suddenly disconnected su: pam_unix\(su-l:session\): session .* for user dbbackup.* su: pam_unix\(su-l:session\): session .* for user postgres.* runuser: pam_unix\(runuser-l:session\).* session opened for user postgres by.*