/var/lib/logcheck/offset\.var\.log\.(syslog|auth\.log)$ VarFile
/var/(lib|lock)/logcheck$ VarDir
