[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Logcheck.ignore problems



Hello all.

I have been working on this, and just can't seem to get it right. Either I
am missing something or just don't get how this is supposed to work. I am
trying to trim down my logcheck reports. I have been very successful, except
for this one entry.... I  receive the following log entry:

www imapd[28413]: Logout user=??? host=localhost [127.0.0.1]

The line I added to logcheck.ignore is:
imapd.*:.Logout.user=???.host=localhost.[127.0.0.1]

But it still shows up. I am sure it is stupid, but anyone have a good idea?
I even tried limiting it to the localhost [12.0.0.1] part, but it didn't
work.

I supposed I can live with it, but it would be nice to eliminate it. Also, I
looked around at psionic, on my box, the archives and online various places,
but don't seem to see any "formal" documentation for logcheck and how to
edit these files (i.e. how and when to use wildcards). Does anyone know
where I can find it? I hate to ask questions I can find the answer to on my
own.

Thanks in advance,
Rick