On Wed, Oct 28, 2009 at 12:30 PM, Andy Smith <[email protected]> wrote: > ok thanks, I turned on the custom template as described in the link > you posted and could immediately see that the events were being logged > as mail.notice, which strangely isnt specifically configured in the > FreeBSD built in syslog conf but these are none the less logged to > maillog instead of messages.
Your original configuration contained this: *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none /var/log/messages If you have messages being delivered to mail.notice they will match the "*.notice" selector at the beginning of that line. It's easy enough to filter them out as you've found, but I figured I'd point out that the configuration did actually specify that these should be sent to /var/log/messages. Aaron _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
