Koozali.org: home of the SME Server

Contribs.org Forums => Koozali SME Server 10.x => Topic started by: robf355 on September 19, 2022, 10:07:07 AM

Title: logwatch Unmatched Entries after reboot
Post by: robf355 on September 19, 2022, 10:07:07 AM

Hi
I'm not sure if this is a problem, but after the 10.1 software update and reboot the next logwatch run shows a lot of  Unmatched Entries:

**Unmatched Entries**
  type=1130 audit(1663497931.722:73895): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.722:73896): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.727:73897): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.727:73898): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.734:73899): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rhel-readonly comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.734:73900): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rhel-readonly comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.817:73901): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1131 audit(1663497931.817:73902): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
  type=1130 audit(1663497931.824:73903): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
 
 ---------------------- Kernel Audit End -------------------------

 
 --------------------- Cron Begin ------------------------

 
 **Unmatched Entries**
 INFO (Shutting down)
 INFO (RANDOM_DELAY will be scaled with factor 68% if used.)
 INFO (Shutting down)
 INFO (RANDOM_DELAY will be scaled with factor 31% if used.)
 
 ---------------------- Cron End -------------------------

They disappear when the day rolls over.
I just wondered why they occur only on reboot, and anything to worry about.
Regards
Rob

Title: Re: logwatch Unmatched Entries after reboot
Post by: bunkobugsy on September 19, 2022, 11:24:39 AM

I have these too on reboot, nothing special.

Title: Re: logwatch Unmatched Entries after reboot
Post by: Fumetto on September 19, 2022, 03:58:49 PM

On version 10.0 too... it's "normal"... :-)

Title: Re: logwatch Unmatched Entries after reboot
Post by: robf355 on September 19, 2022, 05:57:00 PM

Thanks for confirming  :-)