#
# example logsurfer configuration file for (x)ntp-logs >= v3.4 (?)
#

#
# ignore "last message repeated" messages from the syslogd
#
'last message repeated' - - - 0 ignore

#
# ignore "usual" messages
#
' xntpd\[[0-9]*\]: Previous time adjustment didn.t complete' - - - 0 ignore
' xntpd\[[0-9]*\]: time reset ' - - - 0 ignore
' xntpd\[[0-9]*\]: ... No more .Prev time adj didn.t complete' - - - 0 ignore
' xntpd\[[0-9]*\]: (xntpd version|tickadj|precision) *=' - - - 0 ignore

#
# lost sync? only important if we don't get a new sync within the next hour
# or so...
#
# first setup the collect for this sync lost
#
' ([^ ]*) xntpd\[([0-9]*)\]: synchronisation lost' - - - 0 CONTINUE
	open " $2 xntpd\\[$3\\]:" - 100 3600 0
	pipe "/usr/lib/sendmail root"
' ([^ ]*) xntpd\[([0-9]*)\]: synchronisation lost' - - - 0
	rule before 
	" ($2) xntpd\\[($3)\\]: synchronized to" - " ($2) xntpd\\[($3)\\]: synchronized to" - 3600
	delete " $2 xntpd\\[$3\\]:"

#
# ignore the "synchronized to" messages if we don't have a "synchronisation lost"
# (see above)
#
' xntpd\[[0-9]*\]: synchronized to' - - - 0 ignore

#
# the rest is of interest (unusual mesasages)
#
' ([^ ]*) xntpd\[([0-9]*)\]:' - - - 0
	pipe "/usr/lib/sendmail root"

