ffho-salt-public/rsyslog/rsyslog-early.d/sudo-ignores.conf

#
# Don't log sudo messages generated by Icinga2 checks.
#

:msg, contains, "pam_unix(sudo:session): session closed for user root" ~
:msg, contains, "pam_unix(cron:session): session opened for user root by (uid=0)" ~
:msg, contains, "pam_unix(sudo:session): session opened for user root by (uid=0)" ~

# Interfaces
:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_ifupdown2" ~
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ifquery -c -a" ~

# OSPF
:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_bird_ospf" ~
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show ospf neighbors" ~ 
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show ospf neighbors" ~
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show ospf interface" ~
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show ospf interface" ~

# BGP
:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_bird_bgp --asn 65132" ~
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc show protocols all" ~ 
:msg, contains, "root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/birdc6 show protocols all" ~

# Conntrack
:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/local/share/monitoring-plugins/check_conntrack_size" ~

# Mail
:msg, contains, "nagios : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/lib/nagios/plugins/check_mailq" ~