On Thu, Dec 08, 2005 at 11:01:53AM +0000, Adam Funk wrote: > I've been running leafnode, which generates a lot of news.info syslog > entries -- making up over 95% of /var/log/syslog -- so I want to stop > logging news.info at all, but without interfering with anything else. > > I've read various man pages but I can't figure out how to subtract > that from /var/log/syslog.
If I were you I would try "news.!=info" (but I haven't tried actually, so I can't tell whether it works :) I.e., try to modify this line *.*;auth,authpriv.none -/var/log/syslog *.*;auth,authpriv.none;news.!=info -/var/log/syslog If I'm reading syslog.conf(5) correctly, this should stop facility 'news' with a priority exactly equal to 'info' from being logged to /var/log/syslog. Almut -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
