logcheck and crond messages

1 post / 0 new
#1 Wed, 11/30/2005 - 05:55
ChrisBlackwell

logcheck and crond messages

Does anyone know how to stop the following entries being reported by logcheck

Nov 30 11:41:01 localhost crond(pam_unix)[[18067]]: session closed for user root Nov 30 11:42:01 localhost crond(pam_unix)[[18090]]: session opened for user root by (uid=0)

I tried adding the following lines to the Ignored log entries in the Logcheck module

crond(pam_unix)[[.]]: session opened for user root by (uid=0) crond(pam_unix)[[.]]: session closed for user root

but it doesn't seem to have any effect.

I also have a lot of pop3-login, proftpd and postfix messages that are mainly info level which i'd like to ignore so that logcheck is only sending me things that i need to take note of.