Lenny, rsyslog: eliminate mail logging going to both syslog and mail.log
in [Debian]
|
Prev: expect does not expect anything
Next: python-twisted-core on my machines inexplicably still old, breaking installation of python-twisted
From: Stan Hoeppner on 25 Jul 2010 01:00 Tom Furie put forth on 7/24/2010 4:43 AM: > On Fri, Jul 23, 2010 at 06:56:59PM -0400, Tom H wrote: >> On Fri, Jul 23, 2010 at 3:48 PM, Stan Hoeppner <stan(a)hardwarefreak.com> wrote: >>> What do I need to modify in /etc/rsyslog.conf to stop mail system logging from >>> going into /var/log/syslog? Currently it goes to both /var/log/mail.log and >>> to /var/log/syslog. >>> >>> I'm guessing it might have to do with the leading wildcard here: >>> >>> *.*;auth,authpriv.none -/var/log/syslog >> >> IIRC >> *.*;!mail.debug;auth,authpriv.none -/var/log/syslog > > That will stop debug level messages from the mail system. If you want to > be sure of getting NO mail messages in syslog, then you could use > mail.none. (The clue is in the authpriv entry.) Thanks guys. Interesting that the only two folks to respond to my question are both named Tom. (queue Twilight Zone music) Furie's suggestion did the trick. By doing this, will I lose any mail related logging? Anything worth a darn? I've been running a Debian+Postfix MX for 5 years and I can't recall ever searching /var/log/syslog for mail related info, but strictly the mail.* logs. To me the entries in syslog are just been duplicate junk, hence my thread. Any downsides to this at all? Will it break pflogsumm? I've not looked at the code so I don't know if it parses syslog or mail.log. -- Stan -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/4C4BC2CC.30103(a)hardwarefreak.com |