On Tue, Apr 26, 2005 at 03:16:28PM +0200, maximilian attems wrote: > could you send in the typical logline that matches aboves rules?
sure,
Apr 25 22:54:35 sagara udhcpd[6749]: sending OFFER of 192.168.0.21
Apr 25 22:54:35 sagara udhcpd[6749]: sending ACK to 192.168.0.21
>
> logcheck rules should all be terminated by '$' and
> [.0-9]+ is i pressume an ip adress which is better narrowed to
> [.0-9]{7,15}?
exactly, I copied the expression from existing lines in dhcp so I assumed it was
okay
filippo
signature.asc
Description: Digital signature
