[Logcheck-devel] [ttroxell at debian.org: Re: Logcheck rules from other packages]

maximilian attems debian at sternwelten.at
Sat Jun 4 16:25:06 UTC 2005


On Fri, 03 Jun 2005, Todd Troxell wrote:

> Syslog message prefixes to the corresponding rule file, so lines like:
> 
> ^Jun  102:16:32 localhost dhcpd.*$
> 
> would be directed to (and processed only by the dhcpd rule file.)
> 
> Certainly there are complications with this, and I never actually planned to
> implement it in Logcheck proper, but it's something to think about, I guess.

indeed in some time we will need stats about our rules.
because many of them may never match anything real,
witout us noticing anything.
 
--
maks





More information about the Logcheck-devel mailing list