How to get logcheck to ignore hddtemp lines that contain octal \200?

Adam Funk a24061 at ducksburg.com
Thu Apr 26 18:05:26 UTC 2007


On 2007-04-26, Luis Mondesi wrote:

>> Since I upgraded from Ubuntu Edgy to Feisty, hddtemp's output to
>> syslog has ended in "^P?: 34 C" (for example), where the ? represents
>> octal \200, so hddtemp always shows up in logcheck's output; ".*"
>> won't match it.  I've tried copying and pasting the funny character
>> from syslog into the ignore pattern, and I still can't suppress this.

> Did you try using the [[:print:]] char class? I mean, if .* didn't match, it
> might be because this is some how taken to be breaking the line? i'm not
> sure if you can change logcheck to use a modifier, like /m.

Thanks for the suggestion --- I haven't got it to work yet, but I have
a feeling you've put me on a good track.

I've now added this to my variations in the ignore file

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ hddtemp.*:.*[^[:print:]]*:.*$

and it still doesn't ignore them!  I've also tested with 
  egrep 'pattern' /var/log/syslog
as the logcheck docs suggest, and I can't get anything to work yet....





More information about the ubuntu-users mailing list