[Logcheck-devel] Bug#608574: Bug#608574: [PATCH] updated rules for dnsmasq

[Paweł Hajdan, Jr.]

On 9/1/11 11:20 PM, Hannes von Haugwitz wrote:
> Please explain why messages like "Ignoring domain" or "wrong server-ID"
> are messages an administrator doesn't want to see at least once to react
> accordingly (eg by adding local rules or fix the causing issue). In my
> opinion logcheck should only filter those messages by default which are
> just informational and aren't caused by an error.

Right, I guess _some_ administrators may want to see those messages.

However, in my opinion it's mostly noise. The machine in question was a
part of a Windows domain I think, and when it connected to the DHCP
server running logcheck, it tried to use the Windowsic configuration
which resulted in those messages.

There are already examples of arguably similar messages being ignored by
logcheck, e.g. for cups-lpd:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cups-lpd\[[0-9]+\]: Unknown
command-line option "\\" ignored!$

Please let me know if I can provide some more info. Thank you for
careful checking of the filtering rules.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 194 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110902/79029be7/attachment.pgp>