rsyslog: Ignore all known-good sudo log entries generated by Icinga2.

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>

rsyslog/rsyslog-early.d/sudo-ignores.conf

@@ -0,0 +1,29 @@
+#
+# Don't log sudo messages generated by Icinga2 checks.
+#
+
+:msg, contains, "pam_unix(sudo:session): session closed for user root" ~
+:msg, contains, "pam_unix(cron:session): session opened for user root by (uid=0)" ~
+:msg, contains, "pam_unix(sudo:session): session opened for user root by (uid=0)" ~
+
+# Interfaces
+:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_ifupdown2" ~
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ifquery -c -a" ~
+
+# OSPF
+:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_bird_ospf" ~
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show ospf neighbors" ~ 
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show ospf neighbors" ~
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show ospf interface" ~
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show ospf interface" ~
+
+# BGP
+:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_bird_bgp --asn 65132" ~
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show protocols all" ~ 
+:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show protocols all" ~
+
+# Conntrack
+:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_conntrack_size" ~
+
+# Mail
+:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/lib/nagios/plugins/check_mailq" ~