Re: logcheck

[Rudy Gevaert <rudy@zeus.UGent.be>]

On Sat, Oct 18, 2003 at 11:52:15AM +0200, Sven Hoexter wrote:

> > I find the documentation of logcheck to confusing.
> You just need to add the pattern you would like to have ignored
> to the *.ignore files. That's all.

schamper:/etc/logcheck# grep -r postfix  *
ignore.d/postfix:postfix
ignore.d.paranoid/postfix:postfix/pickup\[.*\]: .*: uid=.* from=
ignore.d.paranoid/postfix:postfix/cleanup\[.*\]: .*: .*message-id=
ignore.d.paranoid/postfix:postfix/qmgr\[.*\]: .*: from=
ignore.d.paranoid/postfix:postfix/smtp\[.*\]: .*: to=.*, relay=
ignore.d.paranoid/postfix:postfix/smtpd\[.*\]: .*: client=
ignore.d.paranoid/postfix:postfix/smtpd\[.*\]: disconnect from
ignore.d.paranoid/postfix:postfix/local\[.*\]: .*: to=.*, relay=
ignore.d.paranoid/postfix:postfix.*alias database.*rebuilt
ignore.d.paranoid/postfix:postfix.*aliases.*longest
ignore.d.paranoid/postfix:postfix.*from=
ignore.d.paranoid/postfix:postfix.*lost input channel
ignore.d.paranoid/postfix:postfix.*message-id=
ignore.d.paranoid/postfix:postfix.*putoutmsg
ignore.d.paranoid/postfix:postfix.*status=
ignore.d.paranoid/postfix:postfix.*timeout waiting
ignore.d.server/postfix:postfix
ignore.d.workstation/postfix:postfix

As I'm using the server setup (ignore.d links to ignore.d.server) , I should think that
the entry "postfix" in the file ignore.d.server/postfix would be
enough...

I still get logcheck entries from logcheck.

Any clues?

-- 
Rudy Gevaert                rudy@zeus.UGent.be
Web page                    http://www.webworm.org
Schamper sysadmin           http://www.schamper.ugent.be
GNU/Linux user and Savannah hacker http://savannah.gnu.org
"It's hard to be humble, when you're as great as I am."
        -- Mohammed Ali