[Bug 1476199] [NEW] rsync rule in logcheck database needs update

[Marco van Zwetselaar]

Public bug reported:

This rule in /etc/logcheck/ignore.d.server/rsync:

    ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent)
[0-9]+ bytes  (read|received) [0-9]+ bytes  total size [0-9]+$

does not match rsync output, as rsync uses the comma as a thousands
separator in the byte counts. Suggested:

    ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent)
[0-9,]+ bytes  (read|received) [0-9,]+ bytes  total size [0-9,]+$

or strictly:

    ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: (wrote|sent)
[0-9]{1,3}(,[0-9]{3})* bytes  (read|received) [0-9]{1,3}(,[0-9]{3})*
bytes  total size [0-9]{1,3}(,[0-9]{3})*$

** Affects: logcheck (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logcheck in Ubuntu.
https://bugs.launchpad.net/bugs/1476199

Title:
  rsync rule in logcheck database needs update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logcheck/+bug/1476199/+subscriptions