[Bug 116773] Re: logcheck in dapper+hardy reports normal syslog restarts

[Loïc Minier]

** Description changed:

  Binary package hint: logcheck
  
- Logcheck from default install in Ubuntu Dapper reports cron driven
- restarts of syslog daemon like this:
+ Logcheck from default install in Ubuntu Dapper through Jaunty reports
+ cron driven restarts of syslog daemon like this:
  
- System Events                                                                                           
- =-=-=-=-=-=-=                                                                                           
- May 25 06:25:07 medea exiting on signal 15                                                              
- May 25 06:25:08 medea syslogd 1.4.1#17ubuntu7: restart. 
+ System Events
+ =-=-=-=-=-=-=
+ May 25 06:25:07 medea exiting on signal 15
+ May 25 06:25:08 medea syslogd 1.4.1#17ubuntu7: restart.
  
- 
- Of course this should definitely be ignored as it produces verbose wrong alerts every night. The patch should go to:
- 
- /etc/logcheck/ignore.d.server/syslogd
- 
- As dapper is LTS and therefore installed on servers this patch sould
- definitely be applied to dapper.
- 
- The following lines should fix the issue:
- 
- ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ exiting on signal 15$
- ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd [.0-9]{5}#[0-9a-z]+: restart\.$
+ Workaround:
+ edit /etc/logcheck/ignore.d.paranoid/sysklogd and replace the regexp with:
+ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd [.0-9]+(#[[:alnum:].~+]+)?: restart\.$

-- 
logcheck in dapper+hardy reports normal syslog restarts
https://bugs.launchpad.net/bugs/116773
You received this bug notification because you are a member of Ubuntu
Server Team, which is a direct subscriber.