Board index Freebsd

avoid syslog message in /var/log/messages

avoid syslog message in /var/log/messages

Post by Raymon » Tue, 15 Feb 2000 04:00:00



FreeBSD 2.2.8

Hi there,

I have configured my Cisco 2500 router to send log message to my FreeBSD
server.  It is using default facility "local7".  Following are part of
my /etc/syslog.conf:
----------
local7.*                                        /var/log/cisco.log
*.err;kern.debug;auth.notice;mail.crit          /dev/console
*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
----------

I notice both /var/log/cisco.log and /var/log/messages receive the log
messages from the router.  I would want to know if I can configure so
that ONLY /var/log/cisco.log would receive the message?

Thank you.

-raymond

 
 
 
Top

avoid syslog message in /var/log/messages

Post by Helmut Kre » Wed, 16 Feb 2000 04:00:00



>local7.*                                        /var/log/cisco.log
>*.err;kern.debug;auth.notice;mail.crit          /dev/console
>*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
>----------

>I notice both /var/log/cisco.log and /var/log/messages receive the log
>messages from the router.  I would want to know if I can configure so
>that ONLY /var/log/cisco.log would receive the message?

Changing the entry for /var/log/messages to
local7.none;*.notice;kern.debug;lpr.info;mail.crit;news.err ...
might do the trick.

        Helmut

--
Un*x is user friendly. It's just selective about who it's friends are.


 
 
 
Top

avoid syslog message in /var/log/messages

Post by Thorsten Kuehneman » Wed, 16 Feb 2000 04:00:00



> local7.*                                        /var/log/cisco.log
> *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
> I notice both /var/log/cisco.log and /var/log/messages receive the log

*.notice;kern.debug;lpr.info;mail.crit;news.err;local7.none /var/log/messages

from "man syslog.conf":

    The special level ``none'' disables a particular facility.

Thorsten
--
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!

 
 
 
Top

avoid syslog message in /var/log/messages

Post by Raymon » Wed, 16 Feb 2000 04:00:00


Just try your suggestion by adding "local7.none" at the line for
/var/log/messages.  Unfortunately, it is still doing the same thing.  I
am start to guess that this may be a bug at the router OS.  After all,
we have not updated the router IOS for years.  

Thanks for your suggestion.

-raymond



> >local7.*                                        /var/log/cisco.log
> >*.err;kern.debug;auth.notice;mail.crit          /dev/console
> >*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
> >----------

> >I notice both /var/log/cisco.log and /var/log/messages receive the log
> >messages from the router.  I would want to know if I can configure so
> >that ONLY /var/log/cisco.log would receive the message?

> Changing the entry for /var/log/messages to
> local7.none;*.notice;kern.debug;lpr.info;mail.crit;news.err ...
> might do the trick.

>         Helmut

> --
> Un*x is user friendly. It's just selective about who it's friends are.


 
 
 
Top

avoid syslog message in /var/log/messages

Post by Helmut Kre » Wed, 16 Feb 2000 04:00:00



>Just try your suggestion by adding "local7.none" at the line for
>/var/log/messages.  Unfortunately, it is still doing the same thing.  I
>am start to guess that this may be a bug at the router OS.  After all,
>we have not updated the router IOS for years.  

>> Changing the entry for /var/log/messages to
>> local7.none;*.notice;kern.debug;lpr.info;mail.crit;news.err ...

Okay... toyed around a little bit with my syslog. It's got to be
*.notice;local7.none;kern.debug;lpr.info;mail.crit;news.err

        Helmut

--
Un*x is user friendly. It's just selective about who it's friends are.

 
 
 
Top

avoid syslog message in /var/log/messages

Post by Raymon » Thu, 17 Feb 2000 04:00:00


Thanks, this works!

-raymond



> >Just try your suggestion by adding "local7.none" at the line for
> >/var/log/messages.  Unfortunately, it is still doing the same thing.  I
> >am start to guess that this may be a bug at the router OS.  After all,
> >we have not updated the router IOS for years.

> >> Changing the entry for /var/log/messages to
> >> local7.none;*.notice;kern.debug;lpr.info;mail.crit;news.err ...

> Okay... toyed around a little bit with my syslog. It's got to be
> *.notice;local7.none;kern.debug;lpr.info;mail.crit;news.err

>         Helmut

> --
> Un*x is user friendly. It's just selective about who it's friends are.


 
 
 
Top

1. How large can /var/log/messages and /var/log/syslog get ?

My /var/log/messages is now over 3 meg, and my syslog is 200+ k. I'm
very curious how far is this going to go ?
Is there a way to restrict their sizes ?

cheers,
Hong Siang.
--
======================================================================
The sticker on the box said, "Windows 95, Windows NT 4.0, or better."
So I installed Linux.
======================================================================
Teo Hong Siang                                   Tel (H): (65)746 2598
Manager, DTG Development Office                      (O): (65)772 7114

2. HELP: XFree86

3. How to close /var/log/syslog and /var/log/messages..

4. RedHat 7.3 as a firewall

5. Odd in.pop3d messages in /var/log/{messages,syslog}

6. LILO Problems

7. creating different syslog file /var/log/syslog.0 /var/log/syslog.1...

8. sco v5.0.5 problem

9. Syslog - /var/log/messages - How to Rotate

10. Odd /var/log/syslog message

11. syslog - how is /var/log/messages purged?

12. Kernel messages in /var/log/messages

13. kdm message in /var/log/messages?


All times are UTC
Board index