[Logcheck-devel] Bug#487208: logcheck-database: Nagios pop-3 tests should be ignored by logcheck

[René Hertell]

Package: logcheck-database
Version: 1.2.63~bpo40+2
Severity: normal

I have nagios(2|3) checking a pop3-server where i run logcheck, and this adds the following line on each check (every 5 min)

Jun 20 12:04:38 xxxxxxxx dovecot: pop3-login: Aborted login (0 authentication attempts): rip=xxx.xxx.xxx.xxx, lip=yyy.yyy.yyy.yyy

I tried to add the following line to ignore.d.server/dovecot, but the errors are still slipping through...

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Aborted login \(0 authentication attempts\): rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]$

<René>

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

-- debconf information:
  logcheck-database/conffile-cleanup: false