[Logcheck-devel] Bug#489009: logcheck-database: smbd_audit ignore rule ignores everything

Gerfried Fuchs rhonda at deb.at
Thu Jul 3 07:34:01 UTC 2008


* Piotr Kaczuba <pepe at attika.ath.cx> [2008-07-02 20:54:29 CEST]:
> The rule in /etc/logcheck/ignore.d.server/smbd_audit ignores everything.
> The reason seems to be missing grouping with regard to the pipe (|)
> operator. At the end of the rule you have |.+$, which effectively
> applies to everything.

 You are right, that | was forgotten got get escaped - thanks for your
report.

 So long,
Rhonda






More information about the Logcheck-devel mailing list