Bug#317642: [Logcheck-devel] Bug#317642: How to debug logcheck?

[Rainer Zocholl]

debian at sternwelten.at(maximilian attems)  18.07.05 14:21

Once upon a time "maximilian attems " shaped the electrons to say...

>please try to post concise bug reports.
>your previous tale is hard to follow.

>On Thu, 14 Jul 2005, Rainer Zocholl wrote:

>>>oogrs...
>>>now it works. The lines are not shown anymore.
>>
>> Sorry, not true.
>> That was caused by the "normal" logcheck run updating the offsets.
>>
>> So that question is still open;:
>> Why does a rule, that looks good, that works as expected
>> with "egrep" do not work when run in logcheck?

>you should again read README.logcheck-database.gz,

Mean while i did read it "entirely" (i hope i can remember all...)
I'm very sorry having wasted your time.


But maybe you can add some more subtitles into the long long
text part at the end of text? That makes reading and *finding* easier.

for example

Testing New Rules:
=================

>> How can that be narrowed?

>easily by adding rules and invoking logcheck by hand.

The "trick" was the missing strip of trailing blanks.



>if you need tips on how to craft rules logcheck-devel seems
>a nicer place than bug reports.

Uups, sorry, i thought that's the same.

Thank for the help!

Rainer