Package: logcheck Version: 1.4.3 Severity: normal X-Debbugs-Cc: none, Francesco Potortì <poto...@isti.cnr.it>
I have used logcheck on testing for many years. Being on testing, I occasionally had to add local rules to keep it up. Usually logcheck signaled few lines every day, sometimes no line, sometims (at reboot or big updates) many lines. Starting maybe a couple years ago, logcheck spits an amount of stuff that has now become unamnageable. While in the beginning logs were relevant to the system, which is what I want, now any bug in a user-level daemon writing info to the syslog or to the systemsctl thing makes havoc. I had many email tens of megabytes long. In the last month, reports have been completely useless to me as they are filled with useless things and I am busy adding local rules to remove them Now I have reached a point where its usefulness is negative: I spend more time adding rules than it is worth for me getting the info. One cure would be to have logcheck ignore user-level messages, and only care about system-level ones. Is that possible? -- Francesco Potortì (ricercatore) Mobile: +39.348.8283.107 ISTI - CNR, Pisa, Italy Web: http://fly.isti.cnr.it -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (990, 'testing'), (101, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.6.15-amd64 (SMP w/24 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=C.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages logcheck depends on: ii adduser 3.137 hi cron [cron-daemon] 3.0pl1-189 ii exim4-daemon-light [mail-transport-agent] 4.97-5 ii lockfile-progs 0.1.19+nmu1 ii logtail 1.4.3 ii mime-construct 1.12+really1.11-1 Versions of packages logcheck recommends: ii logcheck-database 1.4.3 Versions of packages logcheck suggests: ii rsyslog [system-log-daemon] 8.2402.0-1 -- Configuration Files: /etc/cron.d/logcheck changed: PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root @reboot logcheck if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck -R; fi 2 4 * * * logcheck if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi /etc/logcheck/header.txt [Errno 13] Permission denied: '/etc/logcheck/header.txt' /etc/logcheck/logcheck.conf [Errno 13] Permission denied: '/etc/logcheck/logcheck.conf' /etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: '/etc/logcheck/logcheck.logfiles' /etc/logcheck/logcheck.logfiles.d/journal.logfiles [Errno 13] Permission denied: '/etc/logcheck/logcheck.logfiles.d/journal.logfiles' /etc/logcheck/logcheck.logfiles.d/syslog.logfiles [Errno 13] Permission denied: '/etc/logcheck/logcheck.logfiles.d/syslog.logfiles' -- no debconf information