Package: logcheck
Version: 1.4.3
Severity: normal
X-Debbugs-Cc: none, Francesco Potortì <poto...@isti.cnr.it>

I have used logcheck on testing for many years.  Being on testing, I 
occasionally had to add local rules to keep it up.  Usually logcheck signaled 
few lines every day, sometimes no line, sometims (at reboot or big updates) 
many lines.

Starting maybe a couple years ago, logcheck spits an amount of stuff that has 
now become unamnageable.  While in the beginning logs were relevant to the 
system, which is what I want, now any bug in a user-level daemon writing info 
to the syslog or to the systemsctl thing makes havoc.  I had many email tens of 
megabytes long.  In the last month, reports have been completely useless to me 
as they are filled with useless things and I am busy adding local rules to 
remove them

Now I have reached a point where its usefulness is negative: I spend more time 
adding rules than it is worth for me getting the info.

One cure would be to have logcheck ignore user-level messages, and only care 
about system-level ones.  Is that possible?

-- 
Francesco Potortì (ricercatore)        Mobile: +39.348.8283.107
ISTI - CNR, Pisa, Italy                Web:    http://fly.isti.cnr.it


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (101, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.6.15-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages logcheck depends on:
ii  adduser                                    3.137
hi  cron [cron-daemon]                         3.0pl1-189
ii  exim4-daemon-light [mail-transport-agent]  4.97-5
ii  lockfile-progs                             0.1.19+nmu1
ii  logtail                                    1.4.3
ii  mime-construct                             1.12+really1.11-1

Versions of packages logcheck recommends:
ii  logcheck-database  1.4.3

Versions of packages logcheck suggests:
ii  rsyslog [system-log-daemon]  8.2402.0-1

-- Configuration Files:
/etc/cron.d/logcheck changed:
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
@reboot         logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10 
/usr/sbin/logcheck -R; fi
2 4 * * *       logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10 
/usr/sbin/logcheck; fi

/etc/logcheck/header.txt [Errno 13] Permission denied: 
'/etc/logcheck/header.txt'
/etc/logcheck/logcheck.conf [Errno 13] Permission denied: 
'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: 
'/etc/logcheck/logcheck.logfiles'
/etc/logcheck/logcheck.logfiles.d/journal.logfiles [Errno 13] Permission 
denied: '/etc/logcheck/logcheck.logfiles.d/journal.logfiles'
/etc/logcheck/logcheck.logfiles.d/syslog.logfiles [Errno 13] Permission denied: 
'/etc/logcheck/logcheck.logfiles.d/syslog.logfiles'

-- no debconf information

Reply via email to