Re: Lenny, rsyslog: eliminate mail logging going to both syslog and mail.log

[Stan Hoeppner <stan@hardwarefreak.com>]

Tom Furie put forth on 7/24/2010 4:43 AM:
> On Fri, Jul 23, 2010 at 06:56:59PM -0400, Tom H wrote:
>> On Fri, Jul 23, 2010 at 3:48 PM, Stan Hoeppner <stan@hardwarefreak.com> wrote:
>>> What do I need to modify in /etc/rsyslog.conf to stop mail system logging from
>>> going into /var/log/syslog?  Currently it goes to both /var/log/mail.log and
>>> to /var/log/syslog.
>>>
>>> I'm guessing it might have to do with the leading wildcard here:
>>>
>>> *.*;auth,authpriv.none          -/var/log/syslog
>>
>> IIRC
>> *.*;!mail.debug;auth,authpriv.none          -/var/log/syslog
> 
> That will stop debug level messages from the mail system. If you want to
> be sure of getting NO mail messages in syslog, then you could use
> mail.none. (The clue is in the authpriv entry.)

Thanks guys.  Interesting that the only two folks to respond to my question
are both named Tom.  (queue Twilight Zone music)  Furie's suggestion did the
trick.

By doing this, will I lose any mail related logging?  Anything worth a darn?
I've been running a Debian+Postfix MX for 5 years and I can't recall ever
searching /var/log/syslog for mail related info, but strictly the mail.* logs.
 To me the entries in syslog are just been duplicate junk, hence my thread.
Any downsides to this at all?  Will it break pflogsumm?  I've not looked at
the code so I don't know if it parses syslog or mail.log.

-- 
Stan