On Thu, 7 Jan 2010, Andy Smith wrote: > Hi, > > Im having trouble getting the config setup how I need it. On a mail > server I have a lot of data being written to the main messages file, > thats because I have mail daemons writting data with a "notice" > severity that is configured to be written to messages (so this is > expected). How can I prevent just mail.notice going to the messages > file while keeping all other *.notice stuff going there? I tried > adding !mail.notice to the config for the messages file but this didnt > seem to work... > Here is my config: > > *.err;kern.warning;auth.notice;mail.crit;local7.none > /dev/console;TraditionalFormatWithPRI > mail.info;mail.notice -/var/log/maillog;TraditionalFormatWithPRI
at this point you can tell it to drop the message by adding the line & ~ this tells it to use the same matchine rules as the line above, and drop the message (don't process it in any further rules) David Lang > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none > -/var/log/messages;TraditionalFormatWithPRI > security.* /var/log/security > auth.info;authpriv.info /var/log/auth.log > lpr.info /var/log/lpd-errs > ftp.info /var/log/xferlog > cron.* /var/log/cron > *.=debug;local7.none /var/log/debug.log > *.emerg * > > thanks Andy. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
