/etc/logcheck/ignore.d.workstation/slim is in logcheck-database 1.3.18.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 | ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ slim: pam_unix\(slim:session\): session opened for user [[:alnum:]-]+ by ([[:alnum:]-]+)?\(uid=[0-9]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ slim: pam_unix\(slim:session\): session closed for user [[:alnum:]-]+$
|