Bug#317642: [Logcheck-devel] Bug#317642: How to debug logcheck?

[maximilian attems]

please try to post concise bug reports.
your previous tale is hard to follow.

On Thu, 14 Jul 2005, Rainer Zocholl wrote:

> >oogrs...
> >now it works. The lines are not shown anymore.
> 
> Sorry, not true.
> That was caused by the "normal" logcheck run updating the offsets.
> 
> So that question is still open;:
> Why does a rule, that looks good, that works as expected
> with "egrep" do not work when run in logcheck?

you should again read README.logcheck-database.gz,
are you adding trailing space??
what's the rule you are referring too?
 
> Permissons are OK(see mail before)
as thought the problem was on your system.
 
> How can that be narrowed?

easily by adding rules and invoking logcheck by hand.

if you need tips on how to craft rules logcheck-devel seems
a nicer place than bug reports.

--
maks