> ntpd\[[0-9]+\]: peer .* now (in)?valid > > adapted from the ntp-server rule
please take a look at /usr/share/doc/logcheck-database/README.logcheck-database.gz * aboves rule doesn't match the complete logline * gratious .* (should only be used for random remote supplied strings) if your read the bug report you'll find above a rule, that was added to current logcheck cvs. please test that one. thanks maks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]