Antti Tolamo wrote:
> At 16:23 6.2.2001, Robert Ramiega wrote:
> >On Tue, Feb 06, 2001 at 04:03:13PM +0200, Antti Tolamo wrote:
> > >
> > >
> > > I just noticed that my logcheck does double entries(same
> > > entry is inserted twice). First comes one hour of entries,
> > > then it is insterted again.
> > >
> > > What could cause this?
> > Bad configuration ;o)))))
> > On a serious side... Logcheck scans several logfiles some information is
> > stored in more than one logfile (f.ex auth.log and syslog). Have a look at
> > /etc/logcheck/logcheck.logfiles and/or
> > /etc/syslog.conf
> > (the first one will show You which logfiles are beeing scanned, the second
> > one will let You configure syslogd and what gets logged where)
> I don't have logcheck.logfile at all???
neither do I. I have the list of logfiles in /usr/sbin/logcheck.sh
maybe check there for the file names.
> What files there should be anyway? I have
> no real way of knowing what should come with it.
the important files are
/etc/logcheck/logcheck.hacking.ignore (not standard, added manually)
> I did install the logcheck debian package from debian mirror
> in Finland.
> To UNSUBSCRIBE, email to email@example.com
> with a subject of "unsubscribe". Trouble? Contact firstname.lastname@example.org
system engineering +43-1-718-98-80
CUBiT IT Solutions http://www.cubit.at
- Re: logcheck
- From: Rene Mayrhofer <email@example.com>