Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-08-27 Thread Stefan Froehlich
Package: logcheck Version: 1.4.2 Followup-For: Bug #1041524 Dear Maintainer, I also had the problem of duplicated journalctl/rsyslogd messages with different time formatting, but otherwise than suggested in this bug I'd like to move to the precision format - and thus came up with a patch to

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-28 Thread Thomas Parmelan
Le jeudi 27 juillet 2023 à 18:44, d'après Richard Lewis : > The possibility of setting JOURNALCTL_OPTS would be great! I think the > pre/post-processing customisation is a good idea too, to move all that > logic from the code to the configuration. > > cool.  this does seem the way

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-27 Thread Richard Lewis
On Mon, 24 Jul 2023, 12:33 Thomas Parmelan, wrote: > Le vendredi 21 juillet 2023 à 23:32, d'après > > > > (or stop using rsyslog entirely). > > I quite like my old habits wrt to /var/log/* :p > > But I now understand that all that is logged via rsyslog comes from > systemd-journald anyway, so

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-24 Thread Thomas Parmelan
Le vendredi 21 juillet 2023 à 23:32, d'après Richard Lewis : > I suppose the timestamp difference is because the journal 'gets' the > message, and then forwards it to rsyslog which then creates its own > timestamp, so even if systemd and rsyslog would agree a common format, > this will always be

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-21 Thread Richard Lewis
On Fri, 21 Jul 2023 at 09:57, Thomas Parmelan wrote: > > Le jeudi 20 juillet 2023 à 21:43, d'après > Richard Lewis : > With the default configuration and without my patch I get this in the > report, which is really not easy to read because of the huge difference > in timestamp formatting (and

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-21 Thread Thomas Parmelan
(Note: it seems you forgot to Cc me - I extracted your mail from the BTS web interface to make this answer. However I now am subscribed to this bug report so that should not matter anymore!) Le jeudi 20 juillet 2023 à 21:43, d'après Richard Lewis : > > The systemd journal is checked by default,

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-20 Thread Richard Lewis
On Thu, 20 Jul 2023 12:15:25 +0200 Thomas Parmelan wrote: Some interesting ideas in here - i think i am missing something though: > The systemd journal is checked by default, in addition to rsyslog files, > starting with logcheck version 1.4.1. But the format of timestamps are > different by

Bug#1041524: logcheck: badly handles "rsyslog + journalctl" checking

2023-07-20 Thread Thomas Parmelan
Package: logcheck Version: 1.4.3 Severity: normal Tags: patch X-Debbugs-Cc: tom+deb...@ankh.fr.eu.org Dear maintainers, The systemd journal is checked by default, in addition to rsyslog files, starting with logcheck version 1.4.1. But the format of timestamps are different by default for journal