[Logcheck-devel] Bug#306913: logcheck: please allow @ in "hostname" part of logs

Peter Palfrader weasel at debian.org
Fri Apr 29 10:52:38 UTC 2005


Package: logcheck
Version: 1.2.37
Severity: normal

When using with syslog-ng configured to also log the source of the log
entry log lines look like:

| Apr 24 06:47:01 s_local at nikki CRON[13878]: (pam_unix) session opened for user root by (uid=0)

Now logcheck doesn't usually allo for the @ in logs which results in
bascially no ignore line matching.  Please add @ to the regexes, thanks.

| System Events
| =-=-=-=-=-=-=
| Apr 24 06:47:01 s_local at nikki CRON[13878]: (pam_unix) session opened for user root by (uid=0)
| Apr 24 06:47:01 s_local at nikki su[13895]: + ??? root:nobody
| Apr 24 06:47:01 s_local at nikki su[13895]: (pam_unix) session opened for user nobody by (uid=0)
| Apr 24 06:47:06 s_local at nikki CRON[13878]: (pam_unix) session closed for user root
[..]


Peter





More information about the Logcheck-devel mailing list