Re: Help with syslog.conf syntax and structure?
On Thu, Dec 08, 2005 at 11:01:53AM +0000, Adam Funk wrote:
> I've been running leafnode, which generates a lot of news.info syslog
> entries -- making up over 95% of /var/log/syslog -- so I want to stop
> logging news.info at all, but without interfering with anything else.
>
> I've read various man pages but I can't figure out how to subtract
> that from /var/log/syslog.
If I were you I would try "news.!=info" (but I haven't tried actually,
so I can't tell whether it works :) I.e., try to modify this line
*.*;auth,authpriv.none -/var/log/syslog
*.*;auth,authpriv.none;news.!=info -/var/log/syslog
If I'm reading syslog.conf(5) correctly, this should stop facility
'news' with a priority exactly equal to 'info' from being logged to
/var/log/syslog.
Almut
Reply to: