Hi, I have setup logcheck and added various filters - it works great apart from one niggle ...
Oct 8 07:38:56 localhost exiting on signal 15 Oct 8 07:38:57 localhost syslogd 1.4.1#17ubuntu7: restart. I can filter out the restart with /etc/logcheck/ignore.d.server/syslogd ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd 1.4.1#17ubuntu7: restart.$ but I cannot find out a way of ignoring 'localhost exiting ...' it does not have a service associated with it so I cannot create a blocking rule in the services name. This happens every cron.daily and so I get a message every day - kind of irritating. Any suggestions ? Dave (PS its a ubuntu system ... just .... err ... you guys are more tech savy :) -- gentoo-user@gentoo.org mailing list