Package: logcheck
Version: 1.4.3
Hi,
As per /usr/sbin/logcheck, when logcheck is run, the LOGFILES
variable is set as the following concatenation:
"("$LOGFILES_LIST" "$LOGFILES_LIST_D"/*.logfiles").
This defeats using an alternate logfiles file since the logfiles
in logfiles.list.d are unconditionally appended to the logfiles
list.
Hence, the -L option does not overrules anymore the default
logfiles list as stated in the manpage, it now extends it.
We are impacted here since in addition to logcheck standard
configuration we use a second set of applications specific log
files for specific logcheck examinations run with a different
cron periodicity than the standard one. This way log messages
reported by this second set of "application" reports do not
get mingled with the standard "system" reports, and vice-versa.
As you might have guessed, this implies the lines in
logcheck.logfiles.d/journal.logfiles are all commented out in
our configurations, we only use syslog.logfiles.
Would you mind modifying the logcheck script so that the -L
option keeps working as a complete alternative to
logcheck.logfiles, as it used to?
Thanks in advance,
--
phep
