From 1263e510f1bad7accf1db234b374cb9ce3caa5d3 Mon Sep 17 00:00:00 2001
From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Tue, 5 May 2009 18:17:00 +0200
Subject: [PATCH] logcheck: Only parse the big all.log in /data.

---
 etc/logcheck/logcheck.logfiles | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/etc/logcheck/logcheck.logfiles b/etc/logcheck/logcheck.logfiles
index e5c5b3f..acbe5ae 100644
--- a/etc/logcheck/logcheck.logfiles
+++ b/etc/logcheck/logcheck.logfiles
@@ -1,4 +1,3 @@
 # these files will be checked by logcheck
-# This has been tuned towards a default syslog install
-/var/log/syslog
-/var/log/auth.log
+# Rsyslog logs everything (really, everything) into this file.
+/data/log/rsyslog/all.log
-- 
2.30.2