Re: LogCheck and it's rules
On Mon, Dec 13, 1999 at 05:55:57PM -0900, Ethan Benson wrote:
> On 13/12/99 Pollywog wrote:
>
> > > and i still get in logcheck mails:
> > > Dec 13 23:46:53 plukwa named[159]: USAGE 945125213 945085613
> >
> >try
> >named.*: USAGE .*
umm i'm not sure if i tried this, but will check it ASAP
> >
> > > Dec 13 23:04:55 plukwa PAM_unix[17035]: (ssh) session opened for user root
> > > by
> > > (uid=0)
> >
> >PAM_unix.*: (ssh) session opened for user root .*
Tried that. No effect
>
> i had the same problems with logcheck, even worse it sent ALL of the
> kernel boot up messages to root as `unusual activity' at every boot.
> along with ALL postfix logging as unusal, pam logins etc etc etc.
I can only shout out: "Same here! Same here!"
I can live with boot messages (this machine doesn't reboot every now and
then. But i hate to see 10KB long messages about me succesfully ssh'ing into
my machine =o(((
--
Robert Ramiega | robert@pdi.net IRC: _Jedi_ | Don't underestimate
UIN: 13201047 | http://plukwa.pdi.net/ | the power of Source
Reply to: