[Logcheck-users] Log Entry not being ignored

[Andrew Berry]

All,

Apologies if this is a simple error but it's been confusing me for a few 
weeks and I have no idea how to fix it.

I've set a cron job to run 3 times an hour (as root) and logcheck's 
picking up on this (but no others).  The output in the email is this:-

Jan  8 20:21:01 homer /USR/SBIN/CRON[8637]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)
Jan  8 20:41:01 homer /USR/SBIN/CRON[2949]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)
Jan  8 21:01:01 homer /USR/SBIN/CRON[12711]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)

I've added the following to /etc/logcheck/ignore.d.server/cron (I assume 
this is the correct file):-

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ \USR\SBIN\CRON\[[0-9]+\]: \([_[:alnum:]-]+\)
CMD \(/usr/bin/python /root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.
cfg\)$

All the testing I've carried out shows that this is correct.

I am running Debian Stable and the version of logcheck from aptitude is 
1.2.39.

Can anyone point me in the correct direction?

Thanks,

Andrew

-- 
Andrew Berry
andrew at aberry.co.uk
http://www.aberry.co.uk