[Logcheck-users] ignore.d.server rule not working?

[Eric Evans]

--UugvWAfsgieZRqgk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Apr 20, 2005 at 06:56:58AM +1000, Dathi Oxencroft muttered these wo=
rds:
> On Wed, 20 Apr 2005 02:10 am, Jon Foreman wrote:
> > I'm running logcheck on Debian and it seems that a rule I have set in
> > /etc/logcheck/ignore.d.server/postfix isn't working. When I test the
> > rule on /var/log/syslog, I see a match. However, logcheck still sends me
> > a report nonetheless.
> >
> > Are there certain circumstances where rules in ignore.d.server would be
> > ignored?
>=20
> Yes, when it's a security event. They are checked with a different rulese=
t.
>=20
> Put your new exception in /etc/logcheck/violations.ignore.d/logcheck-post=
fix

violations.ignore.d/logcheck-postfix is a conffile, editing it will make
it more difficult to take advantage of future revisions made by the
logcheck development team. Create a new file, (something like
violations.ignore.d/local-postfix), and add your custom pattern there.

--=20
Eric Evans
eevans@sym-link.com

--UugvWAfsgieZRqgk
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCZnYi+DWPovKDPJMRAob1AJ0cDc3ZOJnY88heun62xftJ4Ce+xACg9NHX
gW5NZJSYOyULgdxSRBiTKXY=
=7kz6
-----END PGP SIGNATURE-----

--UugvWAfsgieZRqgk--