Hi HKS, Thanks for your reply.
> On Tue, Feb 3, 2009 at 12:08 AM, Michael Mansour <[email protected]> wrote: > > Hi, > > > > I'm using rsyslog 3.18.0 (have been for longer than I can remember now). > > > > I have recently installed a milter for sendmail, and the milter docs show: > > > > LOGGING > > milter-regex sends log messages to syslogd(8) using facility daemon and, > > with increasing verbosity, level err, notice, info and debug. The fol- > > lowing syslog.conf(5) section can be used to log messages to a dedicated > > file: > > > > !milter-regex > > daemon.err;daemon.notice /var/log/milter-regex > > > > I use rsyslog in TraditionalFileFormat and have this entry: > > > > *.info;mail.none;authpriv.none;cron.none;local1.none /var/log/messages > > > > which captures all the daemon.info messages (a lot of them) into my > > /var/log/messages. > > > > I added the daemon.info to: > > > > mail.*;daemon.info -/var/log/maillog > > > > so that I would rightly get the messages included into my maillog file, but > > how do I now remove the messages from my /var/log/messages file with the > > *.info capturing that there? > > > > I've tried using: > > > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.info.none > > /var/log/messages > > > > but just that line stopped all daemon logging into the messages file, so > > basically a day passed and nothing was logged there. > > > > Thanks. > > > > Michael. > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > > Change this: > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.info.none > /var/log/messages > > To this: > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.notice > /var/log/messages I've just tried that, restarted rsyslog and the messages for milter-regex keep appearing in /var/log/messages. I'm 100% these are daemon.info messages since I also use: mail.*;daemon.info -/var/log/maillog and the milter-regex messages that show up in /var/log/maillog are the same ones that show up in /var/log/messages. I'm pretty sure the reason that deamon.info is still going to /var/log/messages is because of the "*.info" entry at the beginning of that line, which catches daemon.info? Is there a way I can stop daemon.info from showing up in /var/log/messages while keeping *.info on that same line? Thanks. Michael. > -HKS > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com ------- End of Original Message ------- _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
