Logcheck devel - Jun 2004 - Bug#149567: logcheck: wish it could split reports to multiple people

hello russel,


On Mon, 10 Jun 2002, russell at coker.com.au wrote:
..
> I would like to be able to have different parts of the report sent to
> different people.  For example if I install a new daemon on a server 
> I want the messages for that daemon going only to me (not the entire
> admin team) until I get it  working properly.  Otherwise excessive 
> spurious messages lead colleagues  to ignore logcheck output entirely.
>
> So I would like to have a list of regex's and email addresses that they
> should  be sent to.  Any line that matches no regex gets sent to the 
> default address.
your bug report is the oldest one from logcheck,
i hope that latest testing version contains code that may 
sastisfy your problem? the proposed solution is a bit 
different than the suggested one, but fixes given problem.

latest logcheck cvs has a '-l' switch for a specific log file and
a '-m' switch for whom the report should be mailed to.

assuming you want to add amavis.log to your
/etc/logcheck/logcheck.logfiles, you could add the following line
to /etc/cron.d/logcheck:
3 * * * *       logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10
/usr/sbin/logcheck -l /var/log/syslog -m me at tld.org; fi

regular reports will stay same as before and not get verbooser,
when your rules are getting tighter you can add it to aboves config file
and then go to the next daemon. you might want to use latest logcheck:
# logcheck testing releases
deb http://debian.stro.at sarge/

if your daemon wants uses syslogd, you can configure a seperate
logfile for that daemon. so i guess aboves bug may be resolved?

thanks for your feedback
a+ maks


ps if you have a nice ruleset for different daemons in sarge,
   don't hesitate to post it as wishlist bug for inclusion in upstream.
pps lateste logcheck has also a nice new switch '-t' that doesn't
update
    offset, so when trying on your machine new rules, that may
    be handy: logcheck -o -t

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040613/63a784ea/attachment.pgp

tags 149567 pending

hello,

proposed sultion seems quicker solution,
than users regex.
hope you've seen the previous reply.

bug will be closed by upload of next version.
a++ maks

Processing commands for control at bugs.debian.org:
> tags 149567 pending
Bug#149567: logcheck: wish it could split reports to multiple people
There were no tags set.
Tags added: pending
> hello,
Unknown command or malformed arguments to command.
> proposed sultion seems quicker solution,
Unknown command or malformed arguments to command.
> than users regex.
Unknown command or malformed arguments to command.
> hope you've seen the previous reply.
Unknown command or malformed arguments to command.
> bug will be closed by upload of next version.
Unknown command or malformed arguments to command.

Too many unknown commands, stopping here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)