Robert Ramiega wrote: <snip> > Maybe You are right but then why this: > named[.*]: Cleaned cache of .* RRsets > causes logcheck to exclude matching lines and the line at the top does not > ??
Are you sure it does ? Perhaps there is another line in your ignore file which matches it. That line should not. I did a test : /tmp/grep$ echo "named[1010]: blah blah blah" | grep -v "named[.*]:" named[1010]: blah blah blah /tmp/grep$ echo "named[1010]: blah blah blah" | grep -v "named\[.*\]:" /tmp/grep$ The first line does not filter out your pattern, but the second one does. I meant to add that the convention seems to be "named.*:", since any well-formed log message will always have the name, the [pid#] and a colon. Less typing, I suppose ... Regards, Paul
