On Wed, 2009-02-04 at 11:30 +1100, Michael Mansour wrote: > > Change this: > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.info.none > > /var/log/messages > > > > To this: > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.notice > > /var/log/messages >
I think it should be *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.none /var/log/messages > I've just tried that, restarted rsyslog and the messages for milter-regex keep > appearing in /var/log/messages. > > I'm 100% these are daemon.info messages since I also use: > > mail.*;daemon.info -/var/log/maillog > > and the milter-regex messages that show up in /var/log/maillog are the same > ones that show up in /var/log/messages. > > I'm pretty sure the reason that deamon.info is still going to > /var/log/messages is because of the "*.info" entry at the beginning of that > line, which catches daemon.info? Yes, because that says "everything with info severity, no matter what the facility is, matches". > > Is there a way I can stop daemon.info from showing up in /var/log/messages > while keeping *.info on that same line? > The .none in my example above is meant to exclude a specific facility from the usual processing and this sounds like what you are looking for. I barely remember that someone had problems with it. So if it does not work, let me know. The part of the code that handles those old-style selectors (old but still good!) is one of the few code sequences that stem directly back to sysklogd and I can't outrule that something went wrong during all that changes of the engine... Please let me know the outcome (saves me the lab). Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
