Log Suppression

[Gregory D Hough]

Fraser Campbell wrote:
> Gregory D Hough wrote:
> 
>> Is there anyway to eliminate oodles of these from appearing in 
>> /var/log/messages?
>>
>> Aug 11 08:30:01 localhost crond(pam_unix)[16278]: session opened for 
>> user root by (uid=0)
> 
> 
> You need to modify /etc/syslog.conf, probably you are logging all cron 
> messages (cron.*).  You could change that so that you're not logging all 
> messages (you probably want at least cron.warn and cron.crit).
> 
> Look at syslogd man page - and other related manpages.
> 
Thanks for pointing me in the right direction (man syslog.conf). The 
selector (cron.*) only affects the /var/log/cron action. To prevent all 
those particular (pam_unix) entries from being logged, I had to add the 
selector (auth.!info) to the /var/log/messages action in 
/etc/syslog.conf and then kill SIGHUP `cat /var/run/syslogd.pid`.

greg
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml