[Logcheck-users] logcheck.ignore issues

[Patrice Seyed]

Hi,

I have been successful in the past using the logcheck.ignore file to not 
have logcheck email me on certain logs syntax.

For example:
ntpd.*: exiting

My problem is with :
named*: lame server resolving
or
named*: lame server*
or
named*:*lame

in logcheck.ignore

I still get messages in email looking like:

> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Oct 17 22:00:01 linga named[16014]: lame server resolving
> '71.11.2.239.in-addr.arpa' (in '239.in-addr.arpa'?): 192.52.71.4#53

If anyone could provide any suggestions or enlighten me in any way as to the

behaviors of logcheck I would appreciate it.

Thank you,
-Patrice

Patrice Seyed
Linux System Administrator - LinGA
RHCE, SCSA
Boston University Medical Campus