Re: Problems with logcheck.ignore rules

[Dave Sherohman <esper@sherohman.org>]

On Tue, Jul 10, 2001 at 03:48:07PM -0500, hanasaki wrote:
> I have the following three rules in my logcheck.ignore file.
> Originally, only the first rule was present but it does not seem to
> ignore entries as the 2nd and 3rd do < Probably I need a lesson in regex
> >.  Input would be appreciated.
> 
> PAM_unix.*: \(imap\) session [opened, closed] for .*

The [] syntax applies to a set of single characters.  Try

(opened)|(closed)

instead.  (The parens are probably superfluous, but I'd try it with
them first, just to be sure.  Then, if you don't like them, you can
take them out and see if it breaks.)