On Fri, 14 Sep 2007 14:06:58 +0200 martin f krafft <madd...@debian.org> wrote: > also sprach Alex Prinsier <deb...@aphexer.mailhaven.com> [2007.09.14.1344 > +0200]: > > Please copy over the filters from cyrus-imapd-2.2. I'm running > > logcheck on a loghost, which doesn't run cyrus itself. There might > > be a better alternative to copying the file, but anyhow it should > > be in logcheck-database.
> logcheck is not designed to be run on a loghost, really. I know it > would be nice, but it's not the general use case. You'll fare best > if you copy the file over, or simply install the cyrus-imapd-2.2 > package on the loghost and disable all services. > I am tempted to close this bug from 2007: - No-one has objected to the above two paragraphs since 2007, over a decade ago - The design of logcheck is that rules can be installed by packages and logcheck-database should not duplicate that, and it would risk file conflicts and out of date files. - People who want to run logcheck on a "loghost" can copy the rules - for example from sources.debian.org or salsa.debian.org HOWEVER: maybe this bug has value as it suggests that the logcheck ignore.d.serve/cyrus rules should actually be deleted: apt-file search cyrus | grep logcheck cyrus-common: /etc/logcheck/ignore.d.server/cyrus-imapd cyrus-common: /etc/logcheck/violations.ignore.d/cyrus-common cyrus-common: /etc/logcheck/violations.ignore.d/cyrus-imapd logcheck-database: /etc/logcheck/ignore.d.server/cyrus
