[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

logcheck regexp question



I have the following line in /etc/logcheck/ignore.d.server/local:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/BIN/CRON\[.*\]: \(root\) CMD \(/usr/sbin/getimage

The level in logcheck.conf is set to server.  Still, these lines show up
in my logcheck messages every hour:

Oct 11 17:06:01 miami /USR/SBIN/CRON[9820]: (root) CMD (/usr/sbin/getimage

I have also tried this line unsuccessfully:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ \/USR\/BIN\/CRON\[.*\]: \(root\) CMD \(\/usr\/sbin\/getimage

Can someone spot what I am missing?

Regards,

-Roberto

-- 
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature


Reply to: