Public bug reported: This rule in /etc/logcheck/ignore.d.server/rsync:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent) [0-9]+ bytes (read|received) [0-9]+ bytes total size [0-9]+$ does not match rsync output, as rsync uses the comma as a thousands separator in the byte counts. Suggested: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent) [0-9,]+ bytes (read|received) [0-9,]+ bytes total size [0-9,]+$ or strictly: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent) [0-9]{1,3}(,[0-9]{3})* bytes (read|received) [0-9]{1,3}(,[0-9]{3})* bytes total size [0-9]{1,3}(,[0-9]{3})*$ ** Affects: logcheck (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to logcheck in Ubuntu. https://bugs.launchpad.net/bugs/1476199 Title: rsync rule in logcheck database needs update To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/logcheck/+bug/1476199/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs