[Logcheck-devel] [ttroxell at debian.org: Re: Logcheck rules from other packages]
maximilian attems
debian at sternwelten.at
Sat Jun 4 16:25:06 UTC 2005
On Fri, 03 Jun 2005, Todd Troxell wrote:
> Syslog message prefixes to the corresponding rule file, so lines like:
>
> ^Jun 102:16:32 localhost dhcpd.*$
>
> would be directed to (and processed only by the dhcpd rule file.)
>
> Certainly there are complications with this, and I never actually planned to
> implement it in Logcheck proper, but it's something to think about, I guess.
indeed in some time we will need stats about our rules.
because many of them may never match anything real,
witout us noticing anything.
--
maks
More information about the Logcheck-devel
mailing list