[Logcheck-devel] Bug#463793: Bug#463793: rsyslogd restarts are not ignored
Russ Allbery
rra at debian.org
Tue Feb 24 22:25:05 UTC 2009
martin f krafft <madduck at debian.org> writes:
> also sprach Dmitry Semyonov <linulin at gmail.com> [2009.02.23.1050 +0100]:
>> As I understand, the rationale for not fixing the bug is "we don't have
>> the time to add and update rules for everything". But since Lenny
>> release, rsyslog no longer falls into the "everything" category. It is
>> now the default system logger, recommended to be used on every Debian
>> machine which does not have any specific syslog requirements not met by
>> rsyslog. So, you can imagine how much time will be wasted by Debian
>> users on the whole to manually disable these daily notifications just
>> because you don't want to make an exception for "the policy". (On the
>> other hand, I understand that it's too late already.)
> Why does rsyslog generate a log message every day?
Probably for the same reason that syslogd reports a log message every day,
which logcheck is already filtering. :)
windlord:/root# cat /etc/logcheck/ignore.d.paranoid/sysklogd
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd [.0-9#]+: restart\.$
(I certainly agree with encouraging people to join the team and help out
by adding rules.)
--
Russ Allbery (rra at debian.org) <http://www.eyrie.org/~eagle/>
More information about the Logcheck-devel
mailing list