Package: rsyslog
Version: 3.14.1-1
Severity: normal

The default timestamp format (high precision) is incompatible with the rules 
that ship
with logcheck.

For example (/etc/logcheck/ignore.server/local-ssh):

  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received SIGHUP; 
restarting.$

whereas the date is displayed by rsyslog like:

  2008-04-10T01:34:17.893241+12:00

Now, I realize it might also be considered a logcheck bug, but the trouble is 
that
rsyslog will break all of the custom rules that people have written.

Francois

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Shell: /bin/sh linked to /bin/dash

Versions of packages rsyslog depends on:
ii  libc6                  2.7-10            GNU C Library: Shared libraries
ii  lsb-base               3.2-7             Linux Standard Base 3.2 init scrip
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

Versions of packages rsyslog recommends:
ii  logrotate                     3.7.1-3    Log rotation utility

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to