Koozali.org: home of the SME Server

logwatch Unmatched Entries after reboot

Offline robf355

  • *
  • 70
  • +0/-0
logwatch Unmatched Entries after reboot
« on: September 19, 2022, 10:07:07 AM »
Hi
I'm not sure if this is a problem, but after the 10.1 software update and reboot the next logwatch run shows a lot of  Unmatched Entries:

**Unmatched Entries**
  type=1130 audit(1663497931.722:73895): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.722:73896): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.727:73897): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.727:73898): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.734:73899): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rhel-readonly comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.734:73900): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rhel-readonly comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.817:73901): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.817:73902): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.824:73903): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
 
 ---------------------- Kernel Audit End -------------------------

 
 --------------------- Cron Begin ------------------------

 
 **Unmatched Entries**
 INFO (Shutting down)
 INFO (RANDOM_DELAY will be scaled with factor 68% if used.)
 INFO (Shutting down)
 INFO (RANDOM_DELAY will be scaled with factor 31% if used.)
 
 ---------------------- Cron End -------------------------

They disappear when the day rolls over.
I just wondered why they occur only on reboot, and anything to worry about.
Regards
Rob

Offline bunkobugsy

  • *
  • 274
  • +4/-0
Re: logwatch Unmatched Entries after reboot
« Reply #1 on: September 19, 2022, 11:24:39 AM »
I have these too on reboot, nothing special.

Offline Fumetto

  • *
  • 874
  • +1/-0
Re: logwatch Unmatched Entries after reboot
« Reply #2 on: September 19, 2022, 03:58:49 PM »
On version 10.0 too... it's "normal"... :-)

Offline robf355

  • *
  • 70
  • +0/-0
Re: logwatch Unmatched Entries after reboot
« Reply #3 on: September 19, 2022, 05:57:00 PM »
Thanks for confirming  :-)