Red Hat Bugzilla – Bug 104662
logwatch missing sshd entries
Last modified: 2007-04-18 12:57:39 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 Galeon/1.2.11 (X11; Linux i686; U;) Gecko/20030417
Description of problem:
logwatch is missing all the SSHD messages. After a little debugging, I
discovered that the problem is that it is running the filter removeheaders
*before* the filter "onlyservice sshd". Then, the SSHD filter gets no lines.
I tried to diagnose this further but have not gotten anywhere yet.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Run "/etc/cron.daily/00-logwatch --print --service sshd --detail high
2. Look at the output (near the end) and you will see that removeheader was run
Oops. Sorry, I submitted this twice.
*** This bug has been marked as a duplicate of 104658 ***
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.