I want to discard a given message, say: mtp-probe: checking bus 1, device 104: "/sys/devices/pci0000:00/0000:00:14.0/usb1/1-1
So, I added ":msg ... stop" lines to my .conf file and restarted rsyslog. host> cd /etc/rsyslog.d host> ls 10-everything.conf host> host> cat 10-everything.conf # Ignore repetitive stuff :msg, contains, "mtp-probe:" stop :msg, contains, "usb 1-1:" stop :msg, contains, "PixArt Lenovo USB Optical Mouse" stop # Log debug messages to a particular place *.=debug /var/log/debug # Log everything to /var/log/syslog *.info /var/log/syslog Host> I figured that the first ":msg ....stop" line would prevent any message containing the string "mtp-probe" from reaching /var/log/syslog But I'm mistaken - these lines continue to be added to /var/log/syslog. What am I overlooking? --sk _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
