[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Help with syslog.conf syntax and structure?

I have what I think is a fairly standard syslog.conf (in other words,
I haven't tinkered with it yet), the non-commented parts of which I've
pasted below.

I've been running leafnode, which generates a lot of news.info syslog
entries -- making up over 95% of /var/log/syslog -- so I want to stop
logging news.info at all, but without interfering with anything else.

I've read various man pages but I can't figure out how to subtract
that from /var/log/syslog.

What do I need to put where in order to achieve this?


auth,authpriv.*                 /var/log/auth.log
*.*;auth,authpriv.none          -/var/log/syslog
#cron.*                         /var/log/cron.log
daemon.*                        -/var/log/daemon.log
kern.*                          -/var/log/kern.log
lpr.*                           -/var/log/lpr.log
mail.*                          -/var/log/mail.log
user.*                          -/var/log/user.log
uucp.*                          /var/log/uucp.log

mail.info                       -/var/log/mail.info
mail.warn                       -/var/log/mail.warn
mail.err                        /var/log/mail.err

news.crit                       /var/log/news/news.crit
news.err                        /var/log/news/news.err
news.notice                     -/var/log/news/news.notice

        news.none;mail.none     -/var/log/debug
        mail,news.none          -/var/log/messages

Reply to: