* Leendert Meyer
I put the following line in ignore.local:
: removed$
The next manual run of logdigest did not generate an email.
The condition of sending a mail is:
1) The filesize of the file to be mailed must be greater than 0 2) FOUND must be 1
FOUND is set to 1 on 3 occasions 1) if grepping using alarming{,.local} results in a non-empty file 2) if grepping using ignore{,.local} results in a non-empty file 3) if EXTENDED_STATS is yes
To at least generate a mail, set EXTENDED_STATS="yes" in /etc/logdigest/config.
OK, ran *many* tests each with slightly differing conditions and seemingly random results, but stumbled upon the answer. Logdigest will not function correctly with more than one *blank* line at the end of one of the condition files under /etc/logdigest. I did not test each file, but noticed the condition with ignore.local. I would *assume* (key word that 'assume') that the actions are similar for each of the condition files. 8^) are we up to a case yet? note: posted to suse-linux-e -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos