config.yaml.sample

# Sample configuration for journalcheck
# Copy to /etc/journalcheck.yaml

# Default priority level (emerg=0, alert=1, crit=2, err=3, warning=4, notice=5, info=6, debug=7)
priority: warning

# Output format (short or json)
format: short

# Cursor file for tracking position (optional, default: /var/lib/journalcheck/cursor)
# cursor_file: /var/lib/journalcheck/cursor

# Optional: pipe output to a command
# output_command: "notify-send 'Journal Alert'"

# Optional: send output via email
# email_to: "admin@example.com"
# email_subject: "Journal Alerts"

# Per-identifier priority filters
identifiers:
  kernel:
    priority: warning
    # Ignore patterns (regex, fullmatch - must match entire message)
    ignore:
      # - ".*some pattern.*"
    # Violation patterns (always shown, search - can match anywhere)
    violations:
      # - "Out of memory"