[EMAIL PROTECTED](maximilian attems) 05.07.05 20:46
>hello, >On Sat, 02 Jul 2005, Rainer Zocholl wrote: >> (Why)Can't exim log file not be checked by logcheck? >good question, >seems like all the logcheck maintainers prefer postfix. But debian defaults to "exim" ;-) >but there is nothing to stop you or anyone else to submit >nice exim rules for further inclusion. I have no clue how/wher to tell logcheck that that "Ignore" rules referes only to a single file: "/var/log/exim/mainlog" In the file is no reference to "exim". Too the date format is other. AFAIK logcheck copies all logs into one and parses that. >> Is exims not supported by exim, if why? >> If not, where could i find an "ignore.server" file? (The exim log >> format seems not fit to any other rules ). >you need to create your own local-exim inside of ignore.d.server But how can i "restrict" them to be applied only to "mainlog" and no other logs, that might use the same format? >> Google finds that question serveral times, >> but no "answer"/solution. >yes i guess it is worthwile to spend some time on that, >so i did some rules to get started, find an attached local-exim4 >will commit these to logcheck cvs soon. AH, thanks. i'see. >it is based on just a small and quick mail usage of mine, >so i guess it will still miss a _lot_ of exim log messages. >would be great if you would post yours, so that rules can be enhanced. >> #tail /var/log/exim/mainlog >> >> 2003-12-21 20:18:45 Start queue run: pid=8976 >> 2003-12-21 20:18:45 End queue run: pid=8976 >> 2003-12-21 20:20:01 1AY97R-0002LU-00 <= [EMAIL PROTECTED] U=root P=local >> S=535 >please post some newer logs that are not catched by attached rules. >thanks Yes ;-) It was only a sample i had in an other mail ;-) The box is a bit "outside" Rainer -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
