[Logcheck-devel] The innd rule that wouldn't match..

max attems debian at sternwelten.at
Fri Oct 8 07:03:44 UTC 2004


On Fri, Oct 08, 2004 at 05:21:53AM +0100, Jamie L. Penman-Smithson wrote:
> According to egrep this rule..
> 
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innd: [-[:alnum:].]+:[0-9]+ (closed|
> checkpoint) seconds [0-9]+ accepted [0-9]+ refused [0-9]+ rejected
> [0-9]+ duplicate [0-9]+ accepted size [0-9]+ duplicate size [0-9]+$
> 
> ..matches these log messages:
> 
> Sep 29 03:45:45 lorien innd: news.jgaa.com:35 closed seconds 3741
> accepted 103 refused 84 rejected 6 duplicate 0 accepted size 393751
> duplicate size 0

yup doublechecked it does.
 
> However, logcheck still reports them:

did you check permissions of the innd rules file?
 
> Thanks - glad to be on the team :)

saw your cvs ci, be gentle atm we are close to a release.
that means please no code changes in src/!
adding tested rules is ok.
and please document your steps in debian/changelog under your name.

a++ maks






More information about the Logcheck-devel mailing list