Re: Fwd: LogWatch 7.3.6: Ignored Lines

Kirk Bauer wrote:
> Wanted to pass this along -- to me as long as I'm going to get an
> email I might as well know how many lines were ignored.
> 
> 
> ---------- Forwarded message ----------
> From: Chris O'Regan <[email protected]>
> Date: Tue, Feb 12, 2008 at 3:26 PM
> Subject: LogWatch 7.3.6: Ignored Lines
> To: [email protected]
> 
> 
> Hello,
> 
>  I am tweaking LogWatch, removing some unwanted lines by placing a regex
>  in "ignore.conf". That works great, but it seems that LogWatch is not
>  noticing that all unmatched entries have been ignored, and as a result,
>  the section is printed. For example:
> 
>  >  --------------------- Connections (secure-log) Begin
> ------------------------
>  >
>  >
>  >  **Unmatched Entries**
>  >
>  >  4 Ignored Lines
>  >
>  >  ---------------------- Connections (secure-log) End
> -------------------------
> 
>  Perhaps this is done by design, but in my opinion it just clutters the
>  report.
> 
> 
>  Thanks,
> 
>  Chris
>

It was by design. I wanted to make sure that whoever say the report 
released that somethings where being dropped by ignore.conf. I'll make a 
note to see if the Unmatched Entries header can be removed when matching 
was done by ignore. [The truth of the matter was when I did that it was 
a quick and painless catch just before output so don't expect to much of 
a rewrite to get rid of that. ;P ]

-Mike