Bug#316619: [Logcheck-devel] Bug#316619: exim logs?

[Rainer Zocholl]

debian at sternwelten.at(maximilian attems)  05.07.05 20:46


>hello,

>On Sat, 02 Jul 2005, Rainer Zocholl wrote:

>> (Why)Can't exim log file not be checked by logcheck?

>good question,
>seems like all the logcheck maintainers prefer postfix.

But debian defaults to "exim" ;-)

>but there is nothing to stop you or anyone else to submit
>nice exim rules for further inclusion.

I have no clue how/wher to tell logcheck that
that "Ignore" rules referes only to a single file:
"/var/log/exim/mainlog"
In the file is no reference to "exim".
Too the date format is other.
AFAIK logcheck copies all logs into one and parses that.



>> Is exims not supported by exim, if why?
>> If not, where could i find an "ignore.server" file? (The exim log
>> format seems not fit to any other rules ).

>you need to create your own local-exim inside of ignore.d.server

But how can i "restrict" them to be applied only to "mainlog"
and no other logs, that might use the same format?


>> Google finds that question serveral times,
>> but no "answer"/solution.

>yes i guess it is worthwile to spend some time on that,
>so i did some rules to get started, find an attached local-exim4
>will commit these to logcheck cvs soon.

AH, thanks. i'see.

>it is based on just a small and quick mail usage of mine,
>so i guess it will still miss a _lot_ of exim log messages.
>would be great if you would post yours, so that rules can be enhanced.

>> #tail /var/log/exim/mainlog
>>
>> 2003-12-21 20:18:45 Start queue run: pid=8976
>> 2003-12-21 20:18:45 End queue run: pid=8976
>> 2003-12-21 20:20:01 1AY97R-0002LU-00 <= root at msi U=root P=local
>> S=535

>please post some newer logs that are not catched by attached rules.
>thanks

Yes ;-)

It was only a sample i had in an other mail ;-)
The box is a bit "outside"


Rainer