[Logcheck-users] Cron & line has bad date problems

[Laszlo Toth]

Dear Logcheck List Member,

I am Laszlo Toth an interested person in Logcheck usage. My intention is to
use Logcheck for analysing firstly a Cisco PIX and MS IIS 6.0 log files
right after when I will see the result I would like to build a more advanced
system for the log analysis.

Actually I have two problems I need to solve.
1st
The cron daemon send me a system in every hours which contains the following
error message:

Subject: Cron <logcheck at san> logcheck if [-x /usr/sbin/logcheck ];
then nice -10 /usr/sbin/logcheck; fi
Content:
/bin/sh -c: line 0: syntax error near unexpected token 'then'
/bin/sh -c: line 0: logcheck  if [-x /usr/sbin/logcheck ]; then nice
-10 /usr/sbin/logcheck fi

I have a Debian lenny beta version. My related environment variables are the
following (can be found in the error message):
X-Cron-Env:<PATH=
/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <SHELL= /bin/sh> -> bash

What is the source of the mentioned problem and how I can get this resolved?

2nd
I mentioned that I would like to analyse web & firewall logs more after the
log made. For example I will analyse log files made on 2008-01-01 10:12:00
tomorrow. On every single row Logcheck made an error message: "line has bad
date" What is the reason for writing that remark to the outpu file? How can
I avoid being the situation like this?

I have already attempted that I gave the date when the log file was made.
For example in the logcheck.configure "DATE="2008-01-01 10:12:00". That was
ineffective to the "line has bad date" error message. What shall I do? Thank
you for you answer.
--
Laszlo Toth
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.alioth.debian.org/pipermail/logcheck-users/attachments/20081026/56b4c308/attachment.htm