Package: rsyslog Version: 3.14.1-1 Severity: normal The default timestamp format (high precision) is incompatible with the rules that ship with logcheck.
For example (/etc/logcheck/ignore.server/local-ssh): ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received SIGHUP; restarting.$ whereas the date is displayed by rsyslog like: 2008-04-10T01:34:17.893241+12:00 Now, I realize it might also be considered a logcheck bug, but the trouble is that rsyslog will break all of the custom rules that people have written. Francois -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/dash Versions of packages rsyslog depends on: ii libc6 2.7-10 GNU C Library: Shared libraries ii lsb-base 3.2-7 Linux Standard Base 3.2 init scrip ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime Versions of packages rsyslog recommends: ii logrotate 3.7.1-3 Log rotation utility -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]