[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Help with syslog.conf syntax and structure?

On Friday 09 December 2005 01:00, Almut Behrens wrote:

> On Thu, Dec 08, 2005 at 11:01:53AM +0000, Adam Funk wrote:
>> I've been running leafnode, which generates a lot of news.info syslog
>> entries -- making up over 95% of /var/log/syslog -- so I want to stop
>> logging news.info at all, but without interfering with anything else.
>> I've read various man pages but I can't figure out how to subtract
>> that from /var/log/syslog.
> If I were you I would try "news.!=info" (but I haven't tried actually,
> so I can't tell whether it works :)   I.e., try to modify this line
> *.*;auth,authpriv.none          -/var/log/syslog
> *.*;auth,authpriv.none;news.!=info   -/var/log/syslog
> If I'm reading syslog.conf(5) correctly, this should stop facility
> 'news' with a priority exactly equal to 'info' from being logged to
> /var/log/syslog.

That seems to be doing exactly what I want.

Thanks very much!

Reply to: