Re: dovecot problems

Orion Poplawski:
> Since updating to logwatch svn 125 on my dovecot 2.0.9 EL6 server it's not
> matching the login lines:
> 
>      mercury dovecot: imap-login: Login: user=<lund>, method=PLAIN,
> rip=127.0.0.1, lip=127.0.0.1, mpid=10356, TLS: 1 Time(s)
> 
> I think this in r125 is the culprit:
> 
> @ -135,7 +135,7 @@
>   while (defined($ThisLine = <STDIN>)) {
>        # remove timestamp.  We can't use *RemoveHeaders because we need the
>        # service name
> -     $ThisLine =~ s/^\w{3} .\d \d\d:\d\d:\d\d [^ ]* //;
> +     $ThisLine =~ s/^\w{3} .\d \d\d:\d\d:\d\d //;
>        if ( ($ThisLine =~ /(?:ssl-build-param|ssl-params): SSL parameters
> regeneration completed/) or
>             ($ThisLine =~ /ssl-params: Generating SSL parameters/) or
>             ($ThisLine =~ /auth-worker/) or
> 
> as it no longer removes the hostname.  Why was this done?

It was a patch from Willi Mann, Debian, see:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571163

Obviously it doesn't work as intended with RHEL.

Here is a sample logfile from the bugreport:
http://bugs.debian.org/cgi-
bin/bugreport.cgi?msg=30;filename=dovecot.log.1;att=3;bug=571163

It looks like syslog doesn't log the hostname. That's why the hostname mustn't 
be removed. But as logwatch is requiring standard syslog format, I suggest to 
revert the mentioned changes.

Regards
Stefan


------------------------------------------------------------------------------
Master SQL Server Development, Administration, T-SQL, SSAS, SSIS, SSRS
and more. Get SQL Server skills now (including 2012) with LearnDevNow -
200+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only - learn more at:
http://p.sf.net/sfu/learnmore_122512