Re: How to change logcheck.sh reporting?

[Dave Sherohman <esper@sherohman.org>]

On Thu, Nov 29, 2001 at 06:47:05PM +0100, Preben Randhol wrote:
> I'm trying to remove some annoying fetchmail lines from the logcheck.sh
> reporting as they are not error messages and they overflow my report.
> 
> I tried to add different things to stop the problem even:
> 
> fetchmail\[.*\].* 
> won't shut it up. 
> 
> Can somebody either point me to a better tool or explain how to do it as
> the documentation isn't very good.

If they are appearing under "unusual events", add your regex to
logcheck.ignore.  If they are under "security violations", add it to
logcheck.violations.ignore.  Note that many things will appear in
both sections and thus need to be ignored both as an unusual event
and as a security violation.

-- 
When we reduce our own liberties to stop terrorism, the terrorists
have already won. - reverius

Innocence is no protection when governments go bad. - Tom Swiss