Date: Mon, 12 Feb 2001 22:55:10 -0800 From: "Crist J. Clark" <cjclark@reflexnet.net> To: G-der <gder@gder.net> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: syslog.conf - duplicate entries in logs Message-ID: <20010212225510.L62368@rfx-216-196-73-168.users.reflex> In-Reply-To: <20010212202638.A52861@gder.net>; from gder@gder.net on Mon, Feb 12, 2001 at 08:26:38PM -0700 References: <20010212202638.A52861@gder.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Feb 12, 2001 at 08:26:38PM -0700, G-der wrote:
> I installed portsentry and didn't like all the spam I was getting in
> messages. portsentry sends messages to syslogd using daemon.notice so I
> put the folowing line in my syslog.conf file.
>
> daemon.notice /var/log/portsentry
>
> After a few tests I see that connection attempts are logged not only in
> /var/log/portsentry but also in messages as well.
>
> A few lines above my entry is:
>
> *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
>
> Notice the *.notice. I was wondering how I might be able to safely
> change this so that I can seperate my portsentry entries from the rest
> of the *.notice entries.
*.notice;kern.debug;lpr.info;mail.crit;news.err;daemon.warning /var/log/messages
^^^^^^^^^^^^^^
Elevating the level at which daemon messages are logged to messges
might help, no? Or even 'daemon.none' to kill them all?
--
Crist J. Clark cjclark@alum.mit.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010212225510.L62368>