[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Problem with logcheck

David Caplan <david@david.ath.cx> writes:

> > I've got a problem with logcheck that I wondered if anyone
> > else has been seeing.
> > 
> > Just after the logrotation in the early morning, I get one
> > screwed up logcheck report back from each machine. The report
> > contains fragments of months old data.
> > 
> > For the other 23 hours of the day, all log reports are just
> > fine.
> > 
> > Any ideas? Is there a bug in the initial processing by 
> > logcheck after the rotate?
>     I get the very same problem! but since it is only from one machine,
>     i haven't bothered to fix it... :)

I've seen it only once, a few days ago, but that was after I changed
the /etc/logcheck/logcheck.logfiles.  There were also a bunch of
warnings from logcheck that it could not create files in
/var/lib/logcheck/.  Have not seen it after (even though I changed
/etc/logcheck/logcheck.logfiles back again).

FYI, the machine is running testing, is updated two, three times a
week and logcheck has not been updated since I installed it on March
5 (version 1.1.1-13.1).  Ditto for logcheck-database.
Olaf Meeuwissen                            EPSON KOWA Corporation, ECS
GnuPG key: 6BE37D90/AB6B 0D1F 99E7 1BF5 EB97  976A 16C7 F27D 6BE3 7D90
LPIC-2               -- I hack, therefore I am --                 BOFH

Reply to: