[Logcheck-devel] The innd rule that wouldn't match..
max attems
debian at sternwelten.at
Fri Oct 8 07:03:44 UTC 2004
On Fri, Oct 08, 2004 at 05:21:53AM +0100, Jamie L. Penman-Smithson wrote:
> According to egrep this rule..
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ innd: [-[:alnum:].]+:[0-9]+ (closed|
> checkpoint) seconds [0-9]+ accepted [0-9]+ refused [0-9]+ rejected
> [0-9]+ duplicate [0-9]+ accepted size [0-9]+ duplicate size [0-9]+$
>
> ..matches these log messages:
>
> Sep 29 03:45:45 lorien innd: news.jgaa.com:35 closed seconds 3741
> accepted 103 refused 84 rejected 6 duplicate 0 accepted size 393751
> duplicate size 0
yup doublechecked it does.
> However, logcheck still reports them:
did you check permissions of the innd rules file?
> Thanks - glad to be on the team :)
saw your cvs ci, be gentle atm we are close to a release.
that means please no code changes in src/!
adding tested rules is ok.
and please document your steps in debian/changelog under your name.
a++ maks
More information about the Logcheck-devel
mailing list