[Logcheck-devel] Bug#406179: logcheck-database: deamon name for openvpn is openvpn and not ovpn-...

[Vincent Danjean]

Package: logcheck-database
Severity: normal
Tags: patch


The current rules for openvpn in ignore.d.server/openvpn use something
as:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ovpn-[._[:alnum:]-]\[[0-9]+\]: ...
whereas I have in my syslog file :
Jan  9 06:50:34 atsina openvpn[26524]: ...

I suggest to change all rules in ignore.d.server/openvpn in something
as:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (openvpn|(ovpn-[._[:alnum:]-]))\[[0-9]+\]: ...
(it works for me)

I do not know when the openvpn deamon changes its name in the log, so I
do not know if it is still needed to keep the ovpn-[._[:alnum:]-] part
I cc the openvpn maintainer in case he knows.

  Best regards
    Vincent

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)