[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: logcheck regexp question



On Thu, Oct 12, 2006 at 12:05:51AM -0400, Roberto C. Sanchez wrote:
> On Wed, Oct 11, 2006 at 10:59:31PM -0400, Kevin Mark wrote:
> > > 
> > > Please excuse me while I go and beat head against a brick wall. 
> > reading debian-devel lately is torture enough x-)
> 
> :-)
> 
> But, argh!!!
> 
> It still doesn't work:
> 
> regex:
> 
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[.*\]: \(root\) CMD \(/usr/sbin/getimage
> 
> still showing up:
> 
> Oct 11 22:06:01 miami /USR/SBIN/CRON[19062]: (root) CMD (/usr/sbin/getimage
> 
> Regards,
> 
Hi Roberto,
I did 'Oct 11 22:06:01 miami /USR/SBIN/CRON[19062]: (root) CMD
(/usr/sbin/getimage' > roberto.txt and used the regex that you did on
the text and it matched[0]. That leads me to look elsewhere. Is this
supposed to match what to display or what not to display? is the log
level set right to exclude this message? not sure as never used that
app.
cheers,
Kev
[0]
egrep "^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[.*\]: \(root\)
CMD \(/usr/sbin/getimage" roberto.txt
-- 
|  .''`.  == Debian GNU/Linux == |       my web site:       |
| : :' :      The  Universal     | debian.home.pipeline.com |
| `. `'      Operating System    | go to counter.li.org and |
|   `-    http://www.debian.org/ |    be counted! #238656   |
|     my keysever: pgp.mit.edu   |     my NPO: cfsg.org     |

Attachment: signature.asc
Description: Digital signature


Reply to: