Ovidiu
13th November 2005, 12:05
hi guys,
anyone using logcheck?
If yes did you change the ignore files? I am using it in server mode or server level but it still keeps showing me some stupid logs which I want to get rid of: one example would be that it does not filter lines like this: Nov 12 18:04:20 h5810 proftpd: (pam_unix) session opened for user web18_admin by
(uid=0) also in /etc/logcheck/ignore.d.server/proftpd there is this line: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd: \(pam_unix\) session (opened|closed) for user [\._[:alnum:]-]+( by \(uid=[0-9]+\))$
a line that I did not insert but was there from the start.
logcheck is set up to be in server mode
anyone using logcheck?
If yes did you change the ignore files? I am using it in server mode or server level but it still keeps showing me some stupid logs which I want to get rid of: one example would be that it does not filter lines like this: Nov 12 18:04:20 h5810 proftpd: (pam_unix) session opened for user web18_admin by
(uid=0) also in /etc/logcheck/ignore.d.server/proftpd there is this line: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd: \(pam_unix\) session (opened|closed) for user [\._[:alnum:]-]+( by \(uid=[0-9]+\))$
a line that I did not insert but was there from the start.
logcheck is set up to be in server mode