Re: I can't make logcheck ignore some things.
On Friday 11 February 2005 08:40, Christopher Pharo Glæserud wrote:
>> So I created a file /etc/logcheck/ignore.d.workstation/af-custom
>> (REPORTLEVEL="workstation" in logcheck.conf) and put the following in
>> it:
This is the right place to put the ignore regexps, isn't it?
>> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: sda.*$
>> But the unwanted lines are still showing up in the the logcheck
>> mails. What am I doing wrong?
>
> I had the same trouble with spamassassin, which adds certain
> characters at the end of the line. Try changing 'unix-dgram' to
> 'unix-stream' in syslog-ng.conf if that's what you're using.
There's nothing like that in my /etc/syslog.conf, and I don't have a
syslog-ng.conf file on my system.
Shouldn't the '.*$' take care of any added characters at the end of the
line anyway?
Reply to: