Incus Logcheck

Log-Überwachung für Incus.

Konfiguration

sudo nano /etc/logcheck/ignore.d.server/incus
# Incus-Ignore-Regeln
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*$
^\w{3} [ :0-9]{11} [^ ]+ incusd\[[0-9]+\]: .*$

Logcheck für Incus

sudo nano /etc/logcheck/logcheck.conf
LOGFILES="/var/log/syslog /var/log/auth.log /var/log/mail.log /var/log/lxd.log"

Custom-Regeln

sudo nano /etc/logcheck/ignore.d.server/incus-custom
# Normaler Incus-Betrieb
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Started$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Stopped$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Created$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Deleted$

Violation-Regeln

sudo nano /etc/logcheck/violations.d/server/incus
# Kritische Incus-Events
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Error$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Failed$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Warning$

Test

sudo logcheck -t -o | grep incus

Zurück zur Container-Übersicht