> ntpd\[[0-9]+\]: peer .* now (in)?valid
> 
> adapted from the ntp-server rule

please take a look at 
/usr/share/doc/logcheck-database/README.logcheck-database.gz

* aboves rule doesn't match the complete logline
* gratious .* (should only be used for random remote supplied strings)

if your read the bug report you'll find above a rule,
that was added to current logcheck cvs.
please test that one.

thanks
maks




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to