Logcheck devel - Nov 2008 - Bug#506863: Ignore filter not working as expected

Package: logcheck
Version: 1.2.45
OS: FreeBSD 6.2-RELEASE

I use the following filter to ignore tls_prune DBERROR's:
/usr/local/etc/logcheck/ignore.d.server/cyrus
	^\w{3} [ :0-9]{11} [._[:alnum:]-]+ tls_prune\[[0-9]+\]: DBERROR db[0-9]:
[0-9]+ lockers$

Running logcheck however it still prints out a security event:
# su -m logcheck -c "/usr/local/bin/bash /usr/local/sbin/logcheck -l
message.log -o -t"

Security Events
=-=-=-=-=-=-=-Nov  5 03:00:00 gonzo tls_prune[7326]: DBERROR db4: 4 lockers
....

If I test the rule it works flawless:
# sed -e 's/[[:space:]]*$//' message.log | egrep \
  '^\w{3} [ :0-9]{11} [._[:alnum:]-]+ tls_prune\[[0-9]+\]: DBERROR db[0-9]:
[0-9]+ lockers$'

Output:
  Oct 24 04:00:00 gonzo tls_prune[55124]: DBERROR db4: 4 lockers

I guess this is a bug.

Best regards,

Hansa
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cyrus
Type: application/octet-stream
Size: 1847 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20081125/165987f2/attachment.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: message.log
Type: application/octet-stream
Size: 629 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20081125/165987f2/attachment-0001.obj

Your message dated Tue, 25 Nov 2008 17:18:30 +0100
with message-id <20081125161830.GA483 at edna.gwendoline.at>
and subject line Re: Bug#506863: Ignore filter not working as expected
has caused the Debian Bug report #506863,
regarding Ignore filter not working as expected
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
506863: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506863
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: "Hansa" <mythtv at logic-q.nl>
Subject: Ignore filter not working as expected
Date: Tue, 25 Nov 2008 12:59:54 +0100
Size: 6568
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20081125/4a046950/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: Gerfried Fuchs <rhonda at deb.at>
Subject: Re: Bug#506863: Ignore filter not working as expected
Date: Tue, 25 Nov 2008 17:18:30 +0100
Size: 2607
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20081125/4a046950/attachment-0001.eml