Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Dec 04, 2015

syslog messages - change logging level

Hello, I am receiving way to many syslog messages. I made sure in the gui that nothing is below the level of notice, but I am still getting alot of informational messages. How I can assure that I only receive notice and above? Thanks!

 

6 Replies

    • Brad_Parker's avatar
      Brad_Parker
      Icon for Cirrus rankCirrus
      I'd encourage you to look closer at step 3. This will allow you to configure syslog-ng to filter the messages being sent to the remote syslog server. You can do something like this: include " filter f_remote_loghost { level(notice..emerg); }; destination d_remote_loghost { udp(\"192.168.22.56\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_loghost); destination(d_remote_loghost); }; "
    • Brad_Parker_139's avatar
      Brad_Parker_139
      Icon for Nacreous rankNacreous
      I'd encourage you to look closer at step 3. This will allow you to configure syslog-ng to filter the messages being sent to the remote syslog server. You can do something like this: include " filter f_remote_loghost { level(notice..emerg); }; destination d_remote_loghost { udp(\"192.168.22.56\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_loghost); destination(d_remote_loghost); }; "
  • Thanks but I'm still getting a severity of informational somehow.

     

    sys syslog { auth-priv-from warning auth-priv-to emerg console-log enabled cron-from warning cron-to emerg daemon-from warning daemon-to emerg description none include none iso-date disabled kern-from debug kern-to emerg local6-from notice local6-to emerg mail-from notice mail-to emerg messages-from notice messages-to warning remote-servers { remotesyslog1 { description none host 192.168.22.56 local-ip none remote-port 514 } } user-log-from notice user-log-to emerg }