This file is indexed.

/etc/logcheck/ignore.d.workstation/net-acct is in logcheck-database 1.3.17.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

1
2
3
4
5
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nacctd: config:$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nacctd: no old dumpfile \(/var/log/net-acct/dump\) exists$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nacctd: net accounting daemon forked$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nacctd: net accounting daemon terminating$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ nacctd: net accounting daemon started$