+
+ <rule id="$(expr "$sid" + 5)" level="0">
+ <if_sid>1002</if_sid>
+ <match>cache</match>
+ <program_name>^named</program_name>
+ <description>Ignore BIND cache warnings</description>
+ </rule>
+
+ <rule id="$(expr "$sid" + 6)" level="0">
+ <if_sid>2933</if_sid>
+ <match>Updated timestamp for job</match>
+ <program_name>^anacron</program_name>
+ <description>Ignore Anacron warnings</description>
+ </rule>