Logcheck rules for rddcached (Debian7.1 – wheezy)

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ rrdcached\[[[:digit:]]+\]: flushing old values|rotating journals
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ rrdcached\[[[:digit:]]+\]: (started new|removing old) journal /var/lib/rrdcached/journal/rrd\.journal.[\.[:digit:]]{17}

To much the following in /var/log/syslog

Sep 20 18:50:28 XXXX rrdcached[24700]: flushing old values
Sep 20 18:50:28 XXXX rrdcached[24700]: rotating journals
Sep 20 18:50:28 XXXX rrdcached[24700]: started new journal /var/lib/rrdcached/journal/rrd.journal.1379695828.566583
Sep 20 18:50:28 XXXX rrdcached[24700]: removing old journal /var/lib/rrdcached/journal/rrd.journal.1379688628.566927

Leave a Reply

Your email address will not be published. Required fields are marked *