This file is indexed.

/etc/logcheck/ignore.d.server/krb5-kdc is in logcheck-database 1.3.17.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

1
2
3
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: (AS|TGS)_REQ \([0-9]+ etypes \{[[:digit:] ]+\}\) [.:[:xdigit:]]+: ISSUE: authtime [[:digit:]]+, etypes \{rep=[[:digit:]]+ tkt=[[:digit:]]+ ses=[[:digit:]]+\}, [._@/[:alnum:]-]+ for [._@/[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: (AS|TGS)_REQ \([0-9]+ etypes \{[[:digit:] ]+\}\) [.:[:xdigit:]]+: NEEDED_PREAUTH: [._@/[:alnum:]-]+ for [._@/[:alnum:]-]+, Additional pre-authentication required$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ krb5kdc\[[0-9]+\]: DISPATCH: repeated \(retransmitted\?\) request from [.:[:xdigit:]]+, resending previous response$