Re: logcheck(1) in bookworm 12.5 /etc/logcheck/logcheck.logfiles.d/syslog.logfiles
On Thu, Mar 14, 2024 at 11:25:52AM -0700, John Conover wrote:
>
> Email from logcheck(1) contains:
>
> E: File could not be read: /var/log/syslog
> E: File could not be read: /var/log/auth.log
>
> which do not exist in bookworm 12.5.
You'll want to install rsyslog, or something equivalent, to get
human-readable text log files. Otherwise, there's just the systemd
journal.
The logcheck package has a "Suggests" for rsyslog, but not a hard
dependency.
Reply to: