[colug-432] syslog-ng: redirecting away from /var/log/messages

[Rick Hornsby]

On September 10, 2016 at 10:07:42, Brian (bnmille at gmail.com) wrote:

Syslog-ng has an option to stop processing a message, if it matches a given
rule.  You can send the log message to a file, and then stop processing it
(so it will not be written to  any more files).  I don't recall the correct
syntax, but it's in the man pages.  Then just put the rule for
/var/log/messages at the end of your config file.

I use the stop rule processing to send junk I never want see to /dev/null.
Works well.

Ah, 'log path flags'[1] might be exactly what I need -- probably
flags(fallback) on the /var/log/messages log{} block. Somehow I missed this.

thanks!

[1]
https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-logflags.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.colug.net/pipermail/colug-432/attachments/20160910/36999f06/attachment.html