All,
Apologies if this is a simple error but it's been confusing me for a few
weeks and I have no idea how to fix it.
I've set a cron job to run 3 times an hour (as root) and logcheck's
picking up on this (but no others). The output in the email is this:-
Jan 8 20:21:01 homer /USR/SBIN/CRON[8637]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)
Jan 8 20:41:01 homer /USR/SBIN/CRON[2949]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)
Jan 8 21:01:01 homer /USR/SBIN/CRON[12711]: (root) CMD (/usr/bin/python
/root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.cfg)
I've added the following to /etc/logcheck/ignore.d.server/cron (I assume
this is the correct file):-
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ \USR\SBIN\CRON\[[0-9]+\]: \([_[:alnum:]-]+\)
CMD \(/usr/bin/python /root/denyhosts/denyhosts.py -c /root/denyhosts/denyhosts.
cfg\)$
All the testing I've carried out shows that this is correct.
I am running Debian Stable and the version of logcheck from aptitude is
1.2.39.
Can anyone point me in the correct direction?
Thanks,
Andrew
--
Andrew Berry
andrew@aberry.co.uk
http://www.aberry.co.uk