Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-07 Thread Richard Lewis
On Wed, 7 Dec 2022, 01:46 Mathias Gibbens, wrote: > On Tue, 2022-12-06 at 23:55 +, Richard Lewis wrote: > > On Tue, 6 Dec 2022 at 01:34, Richard Lewis > > wrote: > > > I didnt do a proper patch yet > > > > And now i have: > > https://salsa.debian.org/debian/logcheck/-/merge_requests/15 > >

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-06 Thread Mathias Gibbens
On Tue, 2022-12-06 at 23:55 +, Richard Lewis wrote: > On Tue, 6 Dec 2022 at 01:34, Richard Lewis > wrote: > > I didnt do a proper patch yet > > And now i have:  > https://salsa.debian.org/debian/logcheck/-/merge_requests/15 Thanks, Richard! I've made a few comments on that merge request. I

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-06 Thread Richard Lewis
On Tue, 6 Dec 2022 at 01:34, Richard Lewis wrote: > I didnt do a proper patch yet And now i have: https://salsa.debian.org/debian/logcheck/-/merge_requests/15

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-05 Thread Richard Lewis
On Mon, 5 Dec 2022, 09:29 Jose M Calhariz, wrote: > can someone do a minimal patch proposing a way to solve this issue? > Hi, Not a patch, but a recipe to patch every rule: for x in ignore.d.* violations.*; do sed -i -E 's,^\^((\\w|\[\[:alpha:\]\])\{3\} \[ :(0-9|\[:digit:\])\]\{11\}),^(\1|[0-9

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-05 Thread Jose M Calhariz
Hi, can someone do a minimal patch proposing a way to solve this issue? So we can discuss the best way to solve it, before doing the big work of solving it. I am going to check why this is out of my radar. Kind regards Jose M Calhariz On December 4, 2022 4:56:51 AM GMT+00:00, Mathias Gibben

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-12-03 Thread Mathias Gibbens
I also would like to see this bug fixed, as a server I've got running bookworm is spamming log events due to the default date format having changed in rsyslog. Jose -- I'd be happy to help out by co-maintaining the logcheck package. The logcheck repo is in the debian group on salsa, so by conv

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-11-23 Thread Richard Lewis
|On Wed, 9 Nov 2022 at 16:09, Stefan Kangas wrote: > In rsyslog 8.2210.0-3, the timestamp format was changed to be high > precision by default. It now looks like this: > > 2022-11-09T15:02:03.157819+01:00 > > I believe this part of all rules: > > ^\w{3} [ :[:digit:]]{11} > > Must be chang

Bug#1023755: logcheck-database: New default rsyslog high-precision timestamp breaks most rules

2022-11-09 Thread Stefan Kangas
Package: logcheck-database Version: 1.3.24 Severity: important Dear Maintainer, In rsyslog 8.2210.0-3, the timestamp format was changed to be high precision by default. It now looks like this: 2022-11-09T15:02:03.157819+01:00 I believe this part of all rules: ^\w{3} [ :[:digit:]]{11}