[Logcheck-users] It's not filtering this one specific line...

parachute at optonline.net parachute at optonline.net
Tue Nov 8 04:13:27 UTC 2005


I keep seeing...
"Nov  7 23:08:09 ns1 amavis[24086]: (24086-06) WARN: all primary  
virus scanners failed, considering backups"

And no matter what I try to make a rule filter for it, it won't go  
away! I've tested my rules by doing `cat /var/log/mail.log | egrep  
"$my_rule"` and it would work and scroll out all the matched output.

Here is one of the rules I tried...
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: +(\([-0-9]+\) +)? 
WARN: all primary virus scanners failed, considering backups

I tried shortened versions, and guaranteed versions like just "all  
primary virus" but it still shows in my email summaries...



More information about the Logcheck-users mailing list