this is a slightly more specific (and logically more consistent) rule:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (spamd: )?(checking|
processing) message <[^[:space:]]+>( aka <[^[:space:]]+>)? for
[._[:alnum:]-]+:[0-9]+(\.)?$

cheers,
Hp.



_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to