Hi, Im having trouble getting the config setup how I need it. On a mail server I have a lot of data being written to the main messages file, thats because I have mail daemons writting data with a "notice" severity that is configured to be written to messages (so this is expected). How can I prevent just mail.notice going to the messages file while keeping all other *.notice stuff going there? I tried adding !mail.notice to the config for the messages file but this didnt seem to work... Here is my config:
*.err;kern.warning;auth.notice;mail.crit;local7.none /dev/console;Tra ditionalFormatWithPRI mail.info;mail.notice -/var/log/maillog;Tradit ionalFormatWithPRI *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none -/var/log/messages;TraditionalFormatWithPRI security.* /var/log/security auth.info;authpriv.info /var/log/auth.log lpr.info /var/log/lpd-errs ftp.info /var/log/xferlog cron.* /var/log/cron *.=debug;local7.none /var/log/debug.log *.emerg * thanks Andy. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
