Re: Different logging formats, standardization...
On Wed, Sep 11, 2002 at 10:08:34PM +0200, Erich Schubert wrote:
What i would like is some standard to especially express and log the
severity of the message (very useful for filtering!)
if you look at the "violations" standard file of logcheck, you'll see
that an application has no reliable way to determine the serverity of
these messages, therefore they contain words such as "reject", then try
to remove false positives by additional expressions in "ignore.d".
You could switch to a syslog daemon that will expose the message
severities already sent by the application. (E.g., syslog-ng can be
configured to print the severity/facility along with the message.)