logcheck struggle
Hi All,
I am no regular expression guru, and I am having severe difficulties
adjusting logcheck to my needs (on a Sid system).
I get the following stuff mailed by logcheck from my syslog which I
don't want to see:
Sep 29 23:02:02 srv1 postfix/smtpd[29293]: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: sql
Sep 29 23:02:02 srv1 postfix/smtpd[29293]: sql_select option missing
Sep 29 23:02:02 srv1 postfix/smtpd[29293]: auxpropfunc error no
mechanism available
I created the following rules at the bottom of the postfix file in
/etc/ignore.d.server/:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]:
_sasl_plugin_load failed on sasl_auxprop_plug_init for plugin: sql$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: sql_select
option missing$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: auxpropfunc
error no mechanism available$
I got the ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]:
part from other lines in the same file.
In /etc/logcheck/logcheck.conf I made sure:
REPORTLEVEL="server"
What am I doing wrong? I Googled around for quite some time, but
couldn't find any usefull docs. Also, in /usr/share/doc/logcheck I
cannnot find anything usefull (but some quote entertaining read on
Gandi or Atilla the Hun SysAdmins ;)).
Thanks in advance for your help!
Pim
Reply to: