I have to admit I do not really understand the question, but to record severity and facility, you can follow this guide:
http://www.rsyslog.com/doc-rsyslog_recording_pri.html HTH Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Andy Smith > Sent: Wednesday, October 28, 2009 1:53 PM > To: [email protected] > Subject: [rsyslog] config prob with mail.info messages > > Hi, > > I´m finding rsyslog is logging all routine (I assume mail.info) > mail messages to the main messages file (FreeBSD 7.0). Can someone > suggest why based on the config: > > *.err;kern.warning;auth.notice;mail.crit;local7.none > /dev/console > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.no > ne > /var/log/messages > security.* /var/log/security > auth.info;authpriv.info /var/log/auth.log > mail.info /var/log/maillog > lpr.info /var/log/lpd-errs > ftp.info /var/log/xferlog > cron.* /var/log/cron > *.=debug;local7.none > /var/log/debug.log > *.emerg * > local7.* :ommysql:127.0.0.1,Syslog,syslog,lisboa08 > !startslip > *.* /var/log/slip.log > !ppp > *.* /var/log/ppp.log > > The messages in the messages file dont include a facility or > criticality value so makes it tough to work out. For example: > > 2009-10-28T12:21:36.782834+00:00 ourmailserver tpop3d[90983]: > connections_post_select: client [3][email protected](1.8.1.1): > disconnected; 93/602717 bytes read/written > > > Can anyone give me a clue?? > > thanks, Andy. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
