Package: logcheck-database
Severity: normal
Tags: patch
The current rules for openvpn in ignore.d.server/openvpn use something
as:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ovpn-[._[:alnum:]-]\[[0-9]+\]: ...
whereas I have in my syslog file :
Jan 9 06:50:34 atsina openvpn[26524]: ...
I suggest to change all rules in ignore.d.server/openvpn in something
as:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (openvpn|(ovpn-[._[:alnum:]-]))\[[0-9]+\]:
...
(it works for me)
I do not know when the openvpn deamon changes its name in the log, so I
do not know if it is still needed to keep the ovpn-[._[:alnum:]-] part
I cc the openvpn maintainer in case he knows.
Best regards
Vincent
-- System Information:
Debian Release: 4.0
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
