Red Hat Bugzilla – Bug 235856
Recent change in syslog format broke logwatch
Last modified: 2007-11-30 17:12:01 EST
Description of problem:
Where there used to be one space after the hostname in the syslog files there
are now two spaces. This brakes various logwatch scripts. Some helper scripts
like 'onlyservice', 'multiservice', 'removeheaders', and 'removeservice', as
well as some service scripts like 'postfix'.
Version-Release number of selected component (if applicable):
Generally, replacing the regexp "^... .. ..:..:.. [^ ]* $ServiceName" with "^...
.. ..:..:..[ ]*[^ ]* $ServiceName" will fix the problem.
The double space in sysklogd could of course be a mistake and one should fix
fixed in sysklogd-1.4.2-4.fc7