[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Help with syslog.conf syntax and structure?

On Thu, Dec 08, 2005 at 11:01:53AM +0000, Adam Funk wrote:
> I've been running leafnode, which generates a lot of news.info syslog
> entries -- making up over 95% of /var/log/syslog -- so I want to stop
> logging news.info at all, but without interfering with anything else.
> I've read various man pages but I can't figure out how to subtract
> that from /var/log/syslog.

If I were you I would try "news.!=info" (but I haven't tried actually,
so I can't tell whether it works :)   I.e., try to modify this line

*.*;auth,authpriv.none          -/var/log/syslog
*.*;auth,authpriv.none;news.!=info   -/var/log/syslog

If I'm reading syslog.conf(5) correctly, this should stop facility
'news' with a priority exactly equal to 'info' from being logged to


Reply to: