I have added several local rules to ignore certain lines in logs, but I've noticed that, in each logcheck report, the lines "Lines skipped," "Patterns to ignore," and
"Ignored lines" are always "0".  Maybe I'm misunderstanding the meaning of those, but it doesn't make sense to me.

- -- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (650, 'testing'), (600, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-k7
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages logcheck depends on:
ii  adduser          3.80                    Add and remove users and groups
ii  cron             3.0pl1-92               management of regular background p
ii  debconf [debconf 1.4.71                  Debian configuration management sy
ii  debianutils      2.15.2                  Miscellaneous utilities specific t
ii  exim4            4.60-4                  metapackage to ease exim MTA (v4)
ii  exim4-daemon-lig 4.60-4                  lightweight exim MTA (v4) daemon
ii  grep             2.5.1.ds2-4             GNU grep, egrep and fgrep
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.43a                 database of system log rules for t
ii  logtail          1.2.43a                 Print log file lines that have not
ii  mailx            1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii  sysklogd [system 1.4.1-17                System Logging Daemon

logcheck recommends no packages.

- -- debconf information:
  logcheck/changes:
* logcheck/install-note:
iD8DBQFEFO5v5+GdyTDsrJsRAnkBAJ4iJtG/ChAyZPbALPAFbk/V7gFbbwCfSWYv
G4BUU47s0wZRy3YZMwvtaT8=
=wLpJ
-----END PGP SIGNATURE-----

tag 356644 moreinfo
thanks

Are you sure you're running logcheck?  These strings don't exist in our tree.

Yes.  I've attached a sample message.  Perhaps it's caused by the summarizing?

are always zero
Reply-To:

#356644 - logcheck: "Lines skipped, " "Patterns to ignore, " "Ignored lines"
are always zero
http://bugs.debian.org/356644

Hi Adam,

Does this bug still exist?

The debian logcheck package is considerably more complicated than the
upstream one (which is considered to be independent from the Debian
package).  Those strings don't exist in current logcheck.  rmadison
output indicates that you were running some version of logcheck from
between sarge and etch.  Does there still exist some problem in the
etch version?

Thanks
Justin

reassign 356644 syslog-summary
tag 356644 - moreinfo unreproducible
thanks

Hi,

The reason that the strings mentioned in this bug are not in logcheck
sources is because it's syslog-summary that prints them.

Reassigning to syslog-summary. It should probably suppress these
messages if there are no patterns passed to it.

reassign 356644 syslog-summary
tag 356644 - moreinfo unreproducible
thanks

Hi,

The reason that the strings mentioned in this bug are not in logcheck
sources is because it's syslog-summary that prints them.

Reassigning to syslog-summary. It should probably suppress these
messages if there are no patterns passed to it.

If syslog-summary isn't interested in fixing this "bug", adding this egrep
would fix it on logcheck's side.  Though the egrep isn't perfectly
paranoid - maybe you would want a ^[0-9]+ at the beginning?

It seems to me that syslog-summary should fix it on their side:
<        if not QUIET or order:
<            print "%8d Patterns to ignore" % len(ignore_pats)
<            print "%8d Ignored lines" % ignored_count
--
(to get rid of the 0 lines skipped message)


Fix on logcheck's side:
246,247c246,247
<           $SYSLOG_SUMMARY "$TMPDIR/checked" | \
<               egrep -v "^Summarizing " | cat >> "$TMPDIR/report" \
---

Dear submitter,

as the package syslog-summary has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/959993

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)