From: Oleg Broytman <phd@phdru.name>
Date: Thu, 1 Jan 2026 12:20:31 +0000 (+0300)
Subject: Feat(logcheck): Update `local-{kea,ssh}`
X-Git-Url: https://git.phdru.name/?a=commitdiff_plain;h=fa3ff4125c85206bd4adec60ee02a9acdec8cb95;p=ansible.git

Feat(logcheck): Update `local-{kea,ssh}`
---

diff --git a/playbooks/roles/logcheck/files/ignore.d/local-kea b/playbooks/roles/logcheck/files/ignore.d/local-kea
index d814a7a..6f834d1 100644
--- a/playbooks/roles/logcheck/files/ignore.d/local-kea
+++ b/playbooks/roles/logcheck/files/ignore.d/local-kea
@@ -8,6 +8,7 @@
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_INIT_REBOOT
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_LEASE_ADVERT
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_LEASE_ALLOC
+^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_LEASE_OFFER
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_PACKET_RECEIVED
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_PACKET_SEND
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ kea-dhcp4: INFO  DHCP4_QUERY_LABEL
diff --git a/playbooks/roles/logcheck/files/ignore.d/local-ssh b/playbooks/roles/logcheck/files/ignore.d/local-ssh
index b442407..57b053b 100644
--- a/playbooks/roles/logcheck/files/ignore.d/local-ssh
+++ b/playbooks/roles/logcheck/files/ignore.d/local-ssh
@@ -15,6 +15,7 @@
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: Disconnecting: Too many authentication failures
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: Failed password for invalid user .+from ([0-9]{1,3}\.){3}[0-9]{1,3} port [0-9]+
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: Invalid user .+from ([0-9]{1,3}\.){3}[0-9]{1,3}
+^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: PAM [0-9] more authentication failures
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: PAM service\(sshd\) ignoring max retries
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: Protocol major versions differ for ([0-9]{1,3}\.){3}[0-9]{1,3} port [0-9]+:
 ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[ .:+0-9]+ [._[:alnum:]-]+ sshd(-session)?\[[0-9]+\]: Unable to negotiate with ([0-9]{1,3}\.){3}[0-9]{1,3} port [0-9]+: no matching (cipher|host key type|key exchange method) found\.