Bug 110461

Summary:	logwatch does not understand sendmail check_ maillog entries
Product:	Red Hat Enterprise Linux 3	Reporter:	Larry Fahnoe <fahnoe>
Component:	logwatch	Assignee:	Elliot Lee <sopwith>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3.0
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-08-25 15:34:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Larry Fahnoe 2003-11-19 18:43:35 UTC

Description of problem:
When logwatch encounters log entries from check_mail, check_relay and
probably the rest of the check_* routines, it does not parse and
report on them, but rather lists them under **Unmached Entries**.

Logwatch 5.0 fixes this problem.

Version-Release number of selected component (if applicable):
logwatch-4.3.2-2

How reproducible:
Anytime sendmail rejects a message in one of the check_* routines.

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Larry Fahnoe 2003-12-17 20:20:17 UTC

Elliot,

My statement that logwatch 5.0 fixes this problem is only partially
correct.  5.0 understands some of the check_* routines, but not all of
them.  If you use an RBL list, the messages end up listed as unmatched.

I'd like to have logwatch work as this is included, but maintaining
logwatch is a pain in the neck.  logcheck was originally from Psionic
which is now Cisco, but the project has apparently moved to debian

--Larry

Comment 2 Elliot Lee 2004-08-20 20:28:08 UTC

How are things with this issue in the latest logwatch (5.2.2)?

Comment 3 Larry Fahnoe 2004-08-25 13:38:20 UTC

Elliot,

I just grabbed 5.2.2 from
ftp://ftp.kaybee.org/pub/redhat/RPMS/noarch/logwatch-5.2.2-1.noarch.rpm
and installed it on my RHEL 3 box and it looks like it has much better
support for the various sendmail check_* routines.  Actually, it looks
like there has been a large amount of work done in a lot of places.  

I've only done light testing of the new version but so far it looks
like a thumbs up.  I note that setting Detail in logwatch.conf to Low,
Med, or High does indeed give varrying levels of detail.

--Larry

Comment 4 Elliot Lee 2004-08-25 15:34:47 UTC

Cool... Package will be in rawhide sooner or later.