Il Fri, Dec 15, 2023 at 11:31:18PM +0000, Richard Lewis scrisse: > On Fri, 15 Dec 2023 at 16:06, Stefano Callegari > <ste.calleg...@tiscali.it> wrote: > > > from few days the email from cron are empty, there is only the header.txt. > > > /etc/logcheck <-bash> # su -s /bin/bash -c "/usr/sbin/logcheck -l > > /var/log/syslog" logcheck > > > > the email has the log lines. Without the -l option, still empty. > > Seems like it isnt checking the syslog -- what is in the files in > /etc/logcheck/logcheck.logfiles.d/ and logcheck.conf ?
~ <-bash> # ls /etc/logcheck/logcheck.logfiles.d/ journal.logfiles syslog.logfiles ~ <-bash> # cat /etc/logcheck/logcheck.logfiles.d/journal.logfiles ## The word 'journal' tells logcheck to check log entries in the ## systemd journal # (This is enabled by default, but if you do not want to check entries # in the journal you can comment out the next line) journal ~ <-bash> # cat /etc/logcheck/logcheck.logfiles.d/syslog.logfiles ## Log entries in the logs listed below will be checked by logcheck # The default is to check standard syslog files # created by rsyslog or other syslog daemons # (If your system does not use a syslog daemon you # can comment these lines out) /var/log/syslog /var/log/auth.log ~ <-bash> # cat /etc/logcheck/logcheck.conf | egrep -v "^#" | egrep -v "^$" REPORTLEVEL="server" SENDMAILTO="logcheck" MAILASATTACH=0 FQDN=1 TMP="/tmp" ~ <-bash> # ls -l /var/log/syslog -rw-r----- 1 root adm 1364965 17 dic 19.55 /var/log/syslog ~ <-bash> # grep logcheck /etc/group adm:x:4:logcheck,stefano logcheck:x:139: > > Are you using systemd? Yes > > I suggest also using the -d option -- should say what it is doing in > great detail (pipe to file or through less) I've tried! Many and many of lines, never ending, it seems a loop. I had to do a ^C. > > > > /etc/logcheck/header.txt [Errno 13] Permesso negato: > > '/etc/logcheck/header.txt' > > /etc/logcheck/logcheck.conf [Errno 13] Permesso negato: > > '/etc/logcheck/logcheck.conf' > > /etc/logcheck/logcheck.logfiles [Errno 13] Permesso negato: > > '/etc/logcheck/logcheck.logfiles' > > /etc/logcheck/logcheck.logfiles.d/journal.logfiles [Errno 13] Permesso > > negato: '/etc/logcheck/logcheck.logfiles.d/journal.logfiles' > > /etc/logcheck/logcheck.logfiles.d/syslog.logfiles [Errno 13] Permesso > > negato: '/etc/logcheck/logcheck.logfiles.d/syslog.logfiles' > > > > -- no debconf information > > Thanks -- Stefano Callegari GnuPG Public Key Server: pgp.mit.edu
