[Logcheck-devel] Bug#463793: rsyslogd restarts are not ignored

[Dmitry Semyonov]

On Mon, 4 Feb 2008 08:15:24 +1300, martin f krafft wrote:

> logcheck has the policy not to ignore restart messages. Thanks for
> the patch, please understand that I won't be including it.

Quote from README.logcheck-database:

"Unfortunately, we don't have the time to add and update rules for
everything, therefore the following exceptions apply:

*  Debug messages
*  Messages produced by software not included in Debian
*  Temporary messages which are due to a bug in the package
*  Messages related to daemon startups and shutdowns

Please do not file bugs related to these messages."

As I understand, the rationale for not fixing the bug is "we don't
have the time to add and update rules for everything". But since Lenny
release, rsyslog no longer falls into the "everything" category. It is
now the default system logger, recommended to be used on every Debian
machine which does not have any specific syslog requirements not met
by rsyslog. So, you can imagine how much time will be wasted by Debian
users on the whole to manually disable these daily notifications just
because you don't want to make an exception for "the policy". (On the
other hand, I understand that it's too late already.)

P.S.
  One of the main reasons why I chose logcheck in favor of logwatch is
that the former sends notifications for 24/7 PCs only when needed
instead of every day. This, in my opinion, should be the ultimate
logcheck policy for default Debian installs.

-- 
...Bye..Dmitry.