[Logcheck-devel] Bug#149567: logcheck: wish it could split reports to multiple people

maks attems debian at sternwelten.at
Sun Jun 13 11:00:18 UTC 2004


hello russel,


On Mon, 10 Jun 2002, russell at coker.com.au wrote:
..
> I would like to be able to have different parts of the report sent to
> different people.  For example if I install a new daemon on a server 
> I want the messages for that daemon going only to me (not the entire
> admin team) until I get it  working properly.  Otherwise excessive 
> spurious messages lead colleagues  to ignore logcheck output entirely.
>
> So I would like to have a list of regex's and email addresses that they
> should  be sent to.  Any line that matches no regex gets sent to the 
> default address.

your bug report is the oldest one from logcheck,
i hope that latest testing version contains code that may 
sastisfy your problem? the proposed solution is a bit 
different than the suggested one, but fixes given problem.

latest logcheck cvs has a '-l' switch for a specific log file and
a '-m' switch for whom the report should be mailed to.

assuming you want to add amavis.log to your
/etc/logcheck/logcheck.logfiles, you could add the following line
to /etc/cron.d/logcheck:
3 * * * *       logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10
/usr/sbin/logcheck -l /var/log/syslog -m me at tld.org; fi

regular reports will stay same as before and not get verbooser,
when your rules are getting tighter you can add it to aboves config file
and then go to the next daemon. you might want to use latest logcheck:
# logcheck testing releases
deb http://debian.stro.at sarge/

if your daemon wants uses syslogd, you can configure a seperate
logfile for that daemon. so i guess aboves bug may be resolved?

thanks for your feedback
a+ maks


ps if you have a nice ruleset for different daemons in sarge,
   don't hesitate to post it as wishlist bug for inclusion in upstream.
pps lateste logcheck has also a nice new switch '-t' that doesn't update
    offset, so when trying on your machine new rules, that may
    be handy: logcheck -o -t

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040613/63a784ea/attachment.pgp 


More information about the Logcheck-devel mailing list