On Wed, Sep 11, 2002 at 10:08:34PM +0200, Erich Schubert wrote:
What i would like is some standard to especially express and log the severity of the message (very useful for filtering!) if you look at the "violations" standard file of logcheck, you'll see that an application has no reliable way to determine the serverity of these messages, therefore they contain words such as "reject", then try to remove false positives by additional expressions in "ignore.d".
You could switch to a syslog daemon that will expose the message severities already sent by the application. (E.g., syslog-ng can be configured to print the severity/facility along with the message.) Mike Stone