[Logwatch] logwatch feature request and packaging changes

Norrin Radd datadan_1@yahoo.com
Tue, 16 Dec 2003 06:06:37 -0800 (PST)


--0-1695808084-1071583597=:66081
Content-Type: text/plain; charset=us-ascii

Yes I added them myself.
 
Your suggestion worked like a charm...thanks a bundle!
 
D

Kirk Bauer <kirk@kaybee.org> wrote:
On Mon, 15 Dec 2003, Norrin Radd wrote:

> In my /etc/log.d/scripts/services/sendmail
> I have the following exclusions assigned:
> 
> while (defined($ThisLine = )) {
> if ( ( $ThisLine =~ m/^[a-zA-Z0-9]+: to=.*stat=/ ) or
> ( $ThisLine =~ m/^alias database [^ ]* (auto)?rebuilt by/ ) or
> ( $ThisLine =~ m/^[^ ]*: [0-9]* aliases, longest [0-9]* bytes, [0-9]* bytes total/ ) or
> ( $ThisLine =~ m/^starting daemon (.*):/ ) or
> ( $ThisLine =~ m/^[a-zA-Z0-9]+: Milter: data, discard/ ) or
> ( $ThisLine =~ m/^[a-zA-Z0-9]+: discarded/ ) or
> ( $ThisLine =~ m/^[a-zA-Z0-9]+: X-Antivirus: Scanned by F-Prot/ ) or
> ( $ThisLine =~ m/^[a-zA-Z0-9]+: X-Antivirus-Summary: Mod score: 0/ ) or
> ( $ThisLine =~ m/^[a-zA-Z0-9]+: clone [a-zA-Z0-9]+, owner=/ ) ) {
> 
> Yet I still see X-Antivirus: Scanned by F-Prot and X-Antivirus-Summary: Mod score: 0 appearing in my logwatch email. I have stopped/started cron seval times.
> What am I missing?

Did you add these lines yourself? I don't see them in my latest
version, but they could have been changed since your version. But you
probably should change the exclusion line to:

( $ThisLine =~ m/X-Antivirus-Summary: Mod score: 0/ ) or

-- 
Kirk Bauer 
http://linux.kaybee.org | www.autorpm.org | www.logwatch.org


---------------------------------
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing
--0-1695808084-1071583597=:66081
Content-Type: text/html; charset=us-ascii

<DIV>Yes I added them myself.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Your suggestion worked like a charm...thanks a bundle!</DIV>
<DIV>&nbsp;</DIV>
<DIV>D<BR><BR><B><I>Kirk Bauer &lt;kirk@kaybee.org&gt;</I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">On Mon, 15 Dec 2003, Norrin Radd wrote:<BR><BR>&gt; In my /etc/log.d/scripts/services/sendmail<BR>&gt; I have the following exclusions assigned:<BR>&gt; <BR>&gt; while (defined($ThisLine = <STDIN>)) {<BR>&gt; if ( ( $ThisLine =~ m/^[a-zA-Z0-9]+: to=.*stat=/ ) or<BR>&gt; ( $ThisLine =~ m/^alias database [^ ]* (auto)?rebuilt by/ ) or<BR>&gt; ( $ThisLine =~ m/^[^ ]*: [0-9]* aliases, longest [0-9]* bytes, [0-9]* bytes total/ ) or<BR>&gt; ( $ThisLine =~ m/^starting daemon (.*):/ ) or<BR>&gt; ( $ThisLine =~ m/^[a-zA-Z0-9]+: Milter: data, discard/ ) or<BR>&gt; ( $ThisLine =~ m/^[a-zA-Z0-9]+: discarded/ ) or<BR>&gt; ( $ThisLine =~ m/^[a-zA-Z0-9]+: X-Antivirus: Scanned by F-Prot/ ) or<BR>&gt; ( $ThisLine =~ m/^[a-zA-Z0-9]+: X-Antivirus-Summary: Mod score: 0/ ) or<BR>&gt; ( $ThisLine =~ m/^[a-zA-Z0-9]+: clone [a-zA-Z0-9]+, owner=/ ) ) {<BR>&gt; <BR>&gt; Yet I still see X-Antivirus: Scanned by
 F-Prot and X-Antivirus-Summary: Mod score: 0 appearing in my logwatch email. I have stopped/started cron seval times.<BR>&gt; What am I missing?<BR><BR>Did you add these lines yourself? I don't see them in my latest<BR>version, but they could have been changed since your version. But you<BR>probably should change the exclusion line to:<BR><BR>( $ThisLine =~ m/X-Antivirus-Summary: Mod score: 0/ ) or<BR><BR>-- <BR>Kirk Bauer <KIRK@KAYBEE.ORG><BR>http://linux.kaybee.org | www.autorpm.org | www.logwatch.org<BR></BLOCKQUOTE><p><hr SIZE=1>
Do you Yahoo!?<br>
<a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=21260/*http://photos.yahoo.com">New Yahoo! Photos - easier uploading and sharing</a>
--0-1695808084-1071583597=:66081--