Re: LogCheck and it's rules

["Paul Keenan" <r11354@email.sps.mot.com>]

Robert Ramiega wrote:
<snip>
>  Maybe You are right but then why this:
> named[.*]: Cleaned cache of .* RRsets
>  causes logcheck to exclude matching lines and the line at the top does not
> ??

Are you sure it does ?  Perhaps there is another line in your ignore
file which matches it.  That line should not.  I did a test :

/tmp/grep$ echo "named[1010]: blah blah blah" | grep -v "named[.*]:"
named[1010]: blah blah blah
/tmp/grep$ echo "named[1010]: blah blah blah" | grep -v "named\[.*\]:"
/tmp/grep$

The first line does not filter out your pattern, but the second one
does.

I meant to add that the convention seems to be "named.*:", since any
well-formed log message will always have the name, the [pid#] and a
colon.  Less typing, I suppose ...

Regards,
Paul