[Logcheck-users] "syslog is smaller" warning

[Martin Bartenberger]

Hi list,

I've installed logcheck some time ago. I also added some ignore filters, 
but there's one thing I can't figure out. Every day I get the following 
mail from logcheck:

System Events
=-=-=-=-=-=-=
*** WARNING ***: Log file /var/log/syslog is smaller than last time checked!
***************
*************** This could indicate tampering.


I guess it has something to do with the logrotate. I'm pretty sure it's 
a false alarm but I don't know how and where to add a ignore filter to 
stop these daily warnings.

Thanks for all helpful answers and greetings from Vienna/Austria,

martin