Is it just me, or is there a reason for it?

[Tom H]

On Fri, Aug 13, 2010 at 11:33 AM, R Kimber <richardkimber at btinternet.com> wrote:
> On Thu, 12 Aug 2010 23:40:37 +0200
> Amedee Van Gasse wrote:
>>
>> What is better: too much logging or too little logging?
>
> But I don't see that as the choice. Rather, either remove the
> uninformative stuff altogether, or put more effort into creating the
> necessary regular expressions that will allow logcheck to filter them out.

Who decides what's informative?!

Have looked at the following to try to get the results that you are
looking for (from the man page)?

/etc/logcheck/logcheck.conf is the main configuration file.

/etc/logcheck/logcheck.logfiles is the list of files to monitor.

/usr/share/doc/logcheck-database/README.logcheck-database.gz for hints
on how to write, test and maintain rules.