Public bug reported:
Hi,
I've been getting a bunch of entries like this in my logwatch emails:
hostname dovecot: imap-login: Login: user=<user>, method=PLAIN,
rip=127.0.0.1, lip=127.0.0.1, mpid=1014,
secured: 1 Time(s)
On a typical day I might get hundreds of such entries and my server is
only a small family server.
It looks as if the problem is in
/usr/share/logwatch/scripts/services/dovecot. It seems to get confused
by the hostname coming after the datestamp and before the service name.
If I tweak the $ThisLine regex to match the hostname things work better,
but still not quite right. I also had to add another login regex to
match the ones in my log. I'll include a patch that works for me.
** Affects: logwatch (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logwatch in Ubuntu.
https://bugs.launchpad.net/bugs/1058760
Title:
unmatched entries for dovecot login
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1058760/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
