Incus Logcheck¶
Log-Überwachung für Incus.
Konfiguration¶
sudo nano /etc/logcheck/ignore.d.server/incus
# Incus-Ignore-Regeln
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*$
^\w{3} [ :0-9]{11} [^ ]+ incusd\[[0-9]+\]: .*$
Logcheck für Incus¶
sudo nano /etc/logcheck/logcheck.conf
LOGFILES="/var/log/syslog /var/log/auth.log /var/log/mail.log /var/log/lxd.log"
Custom-Regeln¶
sudo nano /etc/logcheck/ignore.d.server/incus-custom
# Normaler Incus-Betrieb
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Started$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Stopped$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Created$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Deleted$
Violation-Regeln¶
sudo nano /etc/logcheck/violations.d/server/incus
# Kritische Incus-Events
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Error$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Failed$
^\w{3} [ :0-9]{11} [^ ]+ incus\[[0-9]+\]: .*: Warning$
Test¶
sudo logcheck -t -o | grep incus
Zurück zur Container-Übersicht