[syslog-ng]Logcheck/LogSentry doesn't work right with syslog-ng! How fix...(thinks all is an emergency)
seberino@spawar.navy.mil
seberino@spawar.navy.mil
Fri, 14 Feb 2003 23:14:27 -0800
Nate
The format of syslog-ng output is different enough
that LogSentry has a heart attack at every
logging entry. This will take some work to make
LogSentry work with syslog-ng.
Chris
On Fri, Feb 14, 2003 at 12:21:50PM -0800, Nate Campi wrote:
> On Fri, Feb 14, 2003 at 12:07:34PM -0800, seberino@spawar.navy.mil wrote:
> > LogCheck aka LogSentry look for strange behavior in log files.
> >
> > I just tried syslog-ng for first time and noticed now LogCheck
> > thinks everything is an emergency. How make them like each
> > other???
>
> You need to use the logcheck ignore files (logcheck.ignore and
> logcheck.violations.ignore IIRC). Of course this has nothing to do with
> syslog-ng and should be asked on the abacus mailing list for all
> Psionic.com software (http://www.psionic.com/mailinglist.html - looks
> like they're calling it the "sentry" mailing list now).
> --
> Nate Campi http://www.campin.net
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
--
_______________________________________
Dr. Christian Seberino
SPAWAR Systems Center San Diego
Code 2872
49258 Mills Street, Room 158
San Diego, CA 92152-5385
U.S.A.
Phone: (619) 553-9973
Fax: (619) 553-6521
Email: seberino@spawar.navy.mil
_______________________________________