Displaying 20 results from an estimated 10000 matches similar to: "Question about logcheck"
2010 Jun 14
1
Question about logcheck on redhat
Hello my name is Juan Manuel.
I interested on install logcheck on RedHat Linux 64 bit, please can you tell
if is logcheck compatible with this operating system, and where I can
download the latest version.
Regards.
Juan Manuel.
2007 Jun 26
0
Bug#429384: logcheck: Logcheck depends on mktemp
Package: logcheck
Version: 1.2.56
Followup-For: Bug #429384
I get the following message in my e-mail from cron: Cron <logcheck at entercom>
if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi
/usr/sbin/logcheck: line 645: mktemp: command not found
/usr/sbin/logcheck: line 646: mktemp: command not found
rm: too few arguments
Try `rm --help' for more information.
2010 Nov 05
0
Bug#602494: logcheck runs filters for packages not installed
Package: logcheck
Version: 1.3.13
Severity: normal
Hi, at present my logcheck is into 33 minutes of cpu time for
running the ignore/innd rule, when the innd package is not installed.
If running logcheck against only locally created logfiles, there should
be a configuration option to only run logcheck against installed (or
non-purged) packages.
-- System Information:
Debian Release: squeeze/sid
2012 Jan 27
1
Bug#657641: /usr/sbin/logcheck: line 100: kill: (31667) - No such process
Package: logcheck
Version: 1.3.14
Severity: normal
Tags: patch
I keep getting these messages logged, when under high load.
This patch should clean that up.
commit 72661acccafa519fcb48a6a756e5c35d96e7511d
Author: Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com>
Date: Fri Jan 27 16:08:33 2012 +0100
Workaround for error:
/usr/sbin/logcheck: line 100: kill: (31667)
2008 May 26
0
problem to run logcheck
Hello
I try to execute logcheck from a php page. So I have create a php page with a
button which allow to run logcheck like this : /usr/sbin/logcheck -o >
/var/log/logcheck
(I want to put the result in a file logcheck, that's why I use the option -o)
I have put www-data in the groupe adm : "adduser www-data adm"
And after if I run logcheck like this for exemple:
2006 Jul 04
0
Processed: setting package to logcheck logcheck-database logtail, tagging 354820, tagging 355085, tagging 356681 ... ... ... ... ... ... ...
Processing commands for control at bugs.debian.org:
> # Automatically generated email from bts, devscripts version 2.9.20
> package logcheck logcheck-database logtail
Ignoring bugs not assigned to: logcheck-database logtail logcheck
> tags 354820 + pending
Bug#354820: rules to filter out entries caused by ssh scanners
Tags were: patch
Tags added: pending
> tags 355085 + pending
2005 May 20
0
logcheck error, logtail output
Hello,
I'm having this error:
Warning: If you are seeing this message, your log files may not have
been
checked!
Details:
Could not run logtail or save output
Check temporary directory: /tmp/logcheck.EIX3jp
declare -x HOME="/var/lib/logcheck"
declare -x LANG="en_US"
declare -x LANGUAGE="en_US:en_GB:en"
declare -x LOGNAME="logcheck"
declare -x
2005 Jan 08
1
Re: [Logcheck-commits] CVS logcheck/debian
On Wed, 05 Jan 2005, CVS User ttroxell wrote:
> @@ -70,6 +70,10 @@
> chown logcheck /var/lock/logcheck > /dev/null 2>&1 || true
> fi
>
> + # fix for #284788
> + # update timestamp on cron
> + touch /etc/cron.d/logcheck || true
> +
> ;;
>
> abort-upgrade|abort-remove|abort-deconfigure)
on a box with a broken coreutils install
2011 Mar 07
0
Bug#617232: logcheck: ignore regexes match ipv4 addresses only, causing false positives with ipv6 addresses.
Package: logcheck
Version: 1.3.13
Severity: normal
Various files under ignore.d.* use "[0-9.]{7,15}" to match an IPv4
address, e.g., a connection to rsyncd. However, this does not match
IPv6 addresses, causing spurious reports.
A better regexp might be something like: ([0-9.]{7,15}|[0-9a-f:]{2,39})
-- System Information:
Debian Release: 6.0
APT prefers stable
APT policy: (990,
2008 Jul 21
1
merging violations.ignore.d/logcheck-* into ignore.d.*/*
Hi guys, now that violations.d/logcheck is empty,
violations.ignore.d/logcheck-* are useless and many messages that
were previously elevated and filtered there now turn up as system
events. Thus, I went ahead and merged violations.ignore.d/logcheck-*
into ignore.d.*/* in the viol-merge branch.
http://git.debian.org/?p=logcheck/logcheck.git;a=shortlog;h=refs/heads/viol-merge
Unless I hear
2005 Mar 16
1
Bug#299810: logcheck: grep errors after latest update
Package: logcheck
Version: 1.2.35
Severity: normal
I'm getting the following on two different Unstable boxen:
------------------------------------------------------------------------------
Subject: Cron <logcheck at bandit-hall> if [ -x /usr/sbin/logcheck ]; then
nice -n10 /usr/sbin/logcheck; fi
2006 Jan 09
0
Re: Logcheck-users Digest, Vol 5, Issue 1
The entry is probably not igored because of
the word deny in your path .
You might better set your rule in violation.ignore.d/ directory.
At 13:00 09/01/2006, you wrote:
>Send Logcheck-users mailing list submissions to
> logcheck-users@lists.alioth.debian.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>
2006 May 21
2
Bug#368313: logcheck-database: new postfix violations ignore rule
Package: logcheck-database
Version: 1.2.39
Severity: wishlist
Hi,
I'd like to add the following rule to /etc/logcheck/violations.ignore.d/logcheck-postfix :
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: NOQUEUE: reject: RCPT from [._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]: 554 <[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]>:
2007 Feb 28
0
Bug#330220: Permissions of /var/lock/logcheck not conducive to logcheck user writing to it
Package: logcheck
Version: 1.2.54
Followup-For: Bug #330220
root at ns2:/# ls -l /var/lock/
total 4
drwxr-xr-x 2 root root 4096 2007-01-30 15:40 logcheck
I think chmod 775 on that file would fix this problem...
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked
2006 Oct 06
0
Bug#391458: logcheck: Please provide a way to configure niceness of log scanning process
Package: logcheck
Version: 1.2.47
Severity: wishlist
I'm running logcheck with an extended set of regular expressions on a
desktop system. The CPU load of this system is normally very low, around
3%-5%. When logcheck starts scanning the logs, the CPU usage increases
to 100% for several minutes and working on the system becomes difficult.
I would therefore be very happy about if a
2008 Dec 29
1
cannot run logcheck
Hello, list!
I can't run logcheck. This is the first time my system has not let me run
something, any way I try.
I am member of sudo group. I run this
sudo -u logcheck logcheck -o -t
and get
Sorry, user [user] is not allowed to execute '/usr/sbin/logcheck -o -t' as
logcheck on [machine].
If I try
su -s /bin/bash -c "/usr/sbin/logcheck -o -t" logcheck
I get
2008 Sep 17
2
Bug#499323: logcheck-database: Logcheck fails to ignore certain OpenVPN messages
Package: logcheck-database
Version: 1.2.54
Severity: normal
Tags: patch
Logcheck fails to ignore certain lines generated by OpenVPN; the attached patch
fixes several regular expressions:
* OpenVPN does not print the full path to ifconfig or route (at least here)
* The interface name can also contain dots and does not always start with "tun"
* The startup messages now gets suppressed
2012 Mar 02
1
Bug#661912: logcheck: files with period in ignore rule dirs ignored
Package: logcheck
Version: 1.3.14
Severity: normal
I added a local.rules file to ignore.d.server and then ran logcheck. The file was not used during the run.
Renaming it to local-rules got the file used during the next run.
Fix: periods should be allowed in filenames, or the fact that they are forbidden expressly documented inteh logcheck README.
Thanks
Nils
-- System Information:
Debian
2008 Jan 30
0
Shell Expansion in logcheck.logfiles
I'm running logcheck on a machine hosting a bunch of virtual machines using
vserver, so I'd like to expand shell wildcards in the "logcheck.logfiles"
file. So instead of entering
/var/lib/vservers/v1/var/log/syslog
/var/lib/vservers/v2/var/log/syslog
/var/lib/vservers/v2/var/log/syslog
I can enter
/var/lib/vservers/*/var/log/syslog
which gets expanded to the same thing as
2010 Oct 29
0
Processed: reassign 583155 to logcheck
Processing commands for control at bugs.debian.org:
> reassign 583155 logcheck
Bug #583155 {Done: Hannes von Haugwitz <hannes at vonhaugwitz.com>} [amavisd-new] logcheck-database: Please create rules for amavis(d-new)
Bug #590965 {Done: Hannes von Haugwitz <hannes at vonhaugwitz.com>} [amavisd-new] amavisd-new: Please reprovide logcheck rules
Bug reassigned from package