[cobalt-users] Logcheck

["Brian R. Poppenwimer" <popper@xxxxxxxxxx>]

Hi!
	I have finally got around to installing logcheck, and it did
install fine, and I can run it from the command prompt, no problem.  My
problem arises when I get the logcheck file emailed to me.  I am running
this on a Qube 3.  The Qube3 has about 75 users at the moment, and one
department insists on checking mail every 1 minute (they annoy me, about
15 people).  So needless to say I have huge files, and logcheck
considers it a "Unusual System Event" Everytime someone checks mail.
Can anyone suggest a way to still get the most use out of logcheck, but
the least amount of garbage.  I am essentially just getting the whole
log file emailed to me, very difficult to read throught cause it is so
large.  Suggestions on what to do would be greatly appreciated.  Sample
of the log file is below:

Dec 14 15:08:58 mail in.qpopper[26868]: connect from XXX.XXX.XX.XX
Dec 14 15:08:58 mail in.qpopper[26869]: connect from XXX.XXX.XX.XX
Dec 14 15:08:59 mail in.qpopper[26870]: connect from XXX.XXX.XX.XX
Dec 14 04:02:11 mail in.qpopper[18262]: (v?) POP login by user "user1"
at (XXX.XXX.XX.XX) XXX.XXX.XX.XX
Dec 14 04:02:33 mail in.qpopper[18263]: (v?) POP login by user "user2"
at (XXX.XXX.XX.XX) XXX.XXX.XX.XX
Dec 14 04:03:01 mail in.qpopper[18287]: (v?) POP login by user "user3"
at (XXX.XXX.XX.XX) XXX.XXX.XX.XX

	Also everytime Monitor runs it gets recorded also, anyway to
take this out also, or shouldn't I.

Thanks,
---Brian
==========================================
Brian R. Poppenwimer, CNE, MCP
popper@xxxxxxxxxxxxxxx
Director Of Computer Operations
Nelson & Pope
www.nelsonpope.com