Logcheck devel - Nov 2007 - Bug#452879: Logcheck doesn't ignore smbd_audit logs

Package: Logcheck
Version: 1.2.54
Distro: Debian Etch (stable)
Kernel: 2.6.18-5-686 #1 SMP


I'm trying to force logcheck (reportlevel=server) to ignore smbd_audit logs.
smbd_audit is a vfs module of samba. It writes logs into /var/log/syslog file.
Typical log looks like this:

Oct 24 08:36:14 server4 smbd_audit: Documents|Johnson|192.168.50.19|unlink
ok|Projects/doc1.pdf 

I've added the simplest rule I guess:

^.*smbd_audit.*$

to these files:

/etc/logcheck/violations.ignore.d/logcheck-samba
/etc/logcheck/ignore.d.server/samba 

..but logcheck doesn't want to ignore logs with "smbd_audit".

On the other hand - logcheck "ignore" works fine for many other of my
regexp
rules...


Regards,
-- 
Marcin Kuras

Your message dated Wed, 25 Jun 2008 13:02:07 +0000
with message-id <E1KBUdT-0003ol-0K at ries.debian.org>
and subject line Bug#452879: fixed in logcheck 1.2.65
has caused the Debian Bug report #452879,
regarding Logcheck doesn't ignore smbd_audit logs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
452879: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452879
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Marcin Kuras <cura at debian.linux.org.pl>
Subject: Logcheck doesn't ignore smbd_audit logs
Date: Sun, 25 Nov 2007 22:02:36 +0100
Size: 2063
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080625/80153f6e/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: madduck at debian.org (martin f. krafft)
Subject: Bug#452879: fixed in logcheck 1.2.65
Date: Wed, 25 Jun 2008 13:02:07 +0000
Size: 7009
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080625/80153f6e/attachment-0001.eml