Package: rsyslog
Version: 5.7.10-1
Severity: minor
The logcheck rule provide with rsyslog does not match the "start" info message.
The rule reads:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd"
swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\]
\(re\)start$
but it should be:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyslogd: \[origin software="rsyslogd"
swVersion="[0-9.]+" x-pid="[0-9]+" x-info="http://www.rsyslog.com"\] (re)?start$
Thanks.
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]