Rules config for use with https://github.com/flyingcircusio/check_journal

rules.yml

---
criticalpatterns:
  - 'pam_unix[\w\d\D]*failure'
  - 'gkr-pam[\w\d\D]*invalid'
  - 'USER_AUTH[\w\d\D]*pam_gnome_keyring[\w\d\D]*failed'

criticalexceptions:
  - 'timestamp:".*",level:"(error|warn)"'
  - '0 errors'

warningpatterns:
  - 'gkr-pam[\w\d\D]*unlocked[\w\d\D]*keyring'
  - 'USER_AUTH[\w\d\D]*pam_gnome_keyring[\w\d\D]*success'

warningexceptions:
  - '0 failures'
  - 'node\[.*\]: Exception'