Re: Help with syslog.conf syntax and structure?
On Friday 09 December 2005 01:00, Almut Behrens wrote:
> On Thu, Dec 08, 2005 at 11:01:53AM +0000, Adam Funk wrote:
>> I've been running leafnode, which generates a lot of news.info syslog
>> entries -- making up over 95% of /var/log/syslog -- so I want to stop
>> logging news.info at all, but without interfering with anything else.
>>
>> I've read various man pages but I can't figure out how to subtract
>> that from /var/log/syslog.
>
> If I were you I would try "news.!=info" (but I haven't tried actually,
> so I can't tell whether it works :) I.e., try to modify this line
>
> *.*;auth,authpriv.none -/var/log/syslog
> *.*;auth,authpriv.none;news.!=info -/var/log/syslog
>
> If I'm reading syslog.conf(5) correctly, this should stop facility
> 'news' with a priority exactly equal to 'info' from being logged to
> /var/log/syslog.
That seems to be doing exactly what I want.
Thanks very much!
Reply to: