On Wed, Feb 21, 2024 at 02:24:03PM +0100, Ralf Schlatterbeck wrote: > > Local log lines include the sub-seconds part like: > 2024-02-16T22:05:52.315463+01:00 tux [...] > > while remote logs (in that case from virtual machines on the same host) do not > include the sub-seconds part: > 2024-02-16T22:06:02+01:00 tux1 [...] > > Logcheck currently deals only with the first format. This results in no > logcheck pattern matching for remote host log entries.
I forgot to mention: There is an upstream (rsyslog) bug-report at https://github.com/rsyslog/rsyslog/issues/5332 And a debian bug report for rsyslog at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064385 Thanks Ralf -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: www.runtux.com Reichergasse 131, A-3411 Weidling email: off...@runtux.com
