[Logcheck-devel] Bug#376106: idea: interpolation in filter files
martin f krafft
madduck at debian.org
Fri Jun 30 09:37:13 UTC 2006
Package: logcheck
Severity: wishlist
Since logcheck processes all filter files anyway (instead of just
feeding them to egrep -f), the following may be trivial to
implement:
It would be nice if logcheck filter files would honour variables,
e.g.:
# LEAD=^\w{3} [ :[:digit:]]{11} [-._[:alnum:]]+
# PROCNAME_SMTPD=postfix/smtpd\[[[:digit:]]+\]
# QUEUEID=(NOQUEUE|[[:upper:][:digit:]]+)
# IP=([:digit:]{1,3}\.){3}[:digit:]{1,3}
@LEAD@ @PROCNAME_SMTPD@: $QUEUEID@: reject: RCPT from @HOSTNAME@\[@IP@\] ...
Then, it would also make sense to define a default LEAD, or default
matches for IP addresses and hostnames etc, which can be overridden.
--
Please do not send copies of list mail to me; I read the list!
.''`. martin f. krafft <madduck at debian.org>
: :' : proud Debian developer and author: http://debiansystem.info
`. `'`
`- Debian - when you have better things to do than fixing a system
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature (GPG/PGP)
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060630/33523a81/attachment.pgp
More information about the Logcheck-devel
mailing list