On Tue, Feb 06, 2001 at 04:03:13PM +0200, Antti Tolamo wrote:
>
>
> I just noticed that my logcheck does double entries(same
> entry is inserted twice). First comes one hour of entries,
> then it is insterted again.
>
> What could cause this?
Bad configuration ;o)))))
On a serious side... Logcheck scans several logfiles some information is
stored in more than one logfile (f.ex auth.log and syslog). Have a look at
/etc/logcheck/logcheck.logfiles and/or
/etc/syslog.conf
(the first one will show You which logfiles are beeing scanned, the second
one will let You configure syslogd and what gets logged where)