[Logcheck-devel] Bug#290511: logcheck: syslogd restart in cron.daily/sysklogd causes a log message

[Marc Sherman]

Package: logcheck
Version: 1.2.32
Severity: wishlist

/etc/cron.daily/sysklogd restarts syslogd at the end of the script.
This causes a daily log message, currently missed by logcheck:

Jan 14 06:55:22 pyloric syslogd 1.4.1#16: restart (remote reception).

I'm currently using this regex in ignore.server.d/local-syslogd:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd 1\.4\.1#16: restart \(remote
reception\)\.$

I suspect you'll want to generalize that version number, so you're not
required to update when the sysklogd package is updated.

- Marc


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-k7
Locale: LANG=en_CA, LC_CTYPE=en_CA (charmap=ISO-8859-1)

Versions of packages logcheck depends on:
ii  adduser          3.59                    Add and remove users and groups
ii  cron             3.0pl1-86               management of regular background p
ii  debconf [debconf 1.4.30.11               Debian configuration management sy
ii  debianutils      2.8.4                   Miscellaneous utilities specific t
ii  exim4            4.34-10                 An MTA (Mail Transport Agent)
ii  exim4-daemon-hea 4.34-10                 Exim (v4) with extended features, 
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.32                  A database of system log rules for
ii  logtail          1.2.32                  Print log file lines that have not
ii  mailx            1:8.1.2-0.20040524cvs-4 A simple mail user agent
ii  perl             5.8.4-5                 Larry Wall's Practical Extraction 
ii  sysklogd [system 1.4.1-16                System Logging Daemon

-- debconf information:
  logcheck/changes:
* logcheck/install-note: