[SATLUG] syslog a particular level

Greg Swift gregswift at gmail.com
Sun Dec 12 17:49:14 CST 2010


Take the /var/log/system.log line and add local4.none too it like this:

*.notice;kern.debug;lpr.info;mail.crit;mail.info;news.err;local0.none;local7.none;local4.none
%/var/log/system.log

-greg

On Sun, Dec 12, 2010 at 10:41, Aaron Hackney <aaron at aaronhackney.com> wrote:

> Hey all. Quick question that I can't find a clear answer on.
>
> I have a syslog server that is receiving syslog messages from an
> external source (Cisco ASA firewall) which is sending warning syslog
> messages (local4.*).
>
> This is NOT syslog-ng, but standard syslog.
>
> My config looks like this:
> #######################
>
> local3.* %/var/log/sshd.log
> local5.* %/var/log/smartd.log
> ftp.* %/var/log/ftp.log
> daemon.* %/var/log/daemon.log
> *.notice;kern.debug;lpr.info;mail.crit;mail.info
> ;news.err;local0.none;local7.none
> %/var/log/system.log
> security.* %/var/log/system.log
> auth.info;authpriv.info %/var/log/system.log
> +fw.aaron.pvt
> *.*                     /var/log/cisco-syslog
> *.emerg *
> #######################
>
> It is working fine, in that I am receiving the syslog messages in
> /var/log/cisco-syslog from my host, but I am also receiving those same
> messages in system.log.
>
> Is there a way, with standard syslog, to prevent the local4 messages
> from being written to system.log or do I just need to move on to
> syslog-ng?
>
> TIA!
> -A
>
> --
> "Don't ask yourself what the world needs. Ask yourself what makes you
> come alive and then go do that. Because what the world needs is people
> who have come alive." -Dr. Howard Thurman
>
> ******************************
> Aaron Keith Hackney
> aaron at aaronkeithstudios.com
> Cell 210.325.2196
> ******************************
> --
> _______________________________________________
> SATLUG mailing list
> SATLUG at satlug.org
> http://alamo.satlug.org/mailman/listinfo/satlug to manage/unsubscribe
> Powered by Rackspace (www.rackspace.com)
>


More information about the SATLUG mailing list