Keith Edmunds wrote: > Anyone done that? Thought about it? Have any suggestions? See debian bug #165449. I second the feature request but due to the current design of logcheck it is not practicable. Furthermore it stands on a feature list [1] for a logcheck rewrite. Greetings Hannes [1] http://wiki.logcheck.org/logfilter