From owner-freebsd-questions@FreeBSD.ORG Wed Mar 2 13:45:44 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 65EB01065670 for ; Wed, 2 Mar 2011 13:45:44 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.net (adsl-70-129-195-213.dsl.ksc2mo.swbell.net [70.129.195.213]) by mx1.freebsd.org (Postfix) with ESMTP id 18C078FC1B for ; Wed, 2 Mar 2011 13:45:43 +0000 (UTC) Received: from www.dweimer.net (localhost [127.0.0.1]) by webmail.dweimer.net (8.14.4/8.14.4) with ESMTP id p22DjhQ1010317 for ; Wed, 2 Mar 2011 07:45:43 -0600 (CST) (envelope-from dweimer@dweimer.net) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 02 Mar 2011 08:45:43 -0500 From: "Dean E. Weimer" To: Mail-Reply-To: In-Reply-To: References: <3787f7ba69db4e2b72443f513f3f148e@www.dweimer.net> Message-ID: <78945533e00f13c60c6c27ce11e11cbb@www.dweimer.net> X-Sender: dweimer@dweimer.net User-Agent: RoundCube Webmail/0.5 Subject: Re: IPFilter and IPMon logging to syslog X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: dweimer@dweimer.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2011 13:45:44 -0000 On Wed, 2 Mar 2011 09:34:39 +0100, n j wrote: > On Tue, Mar 1, 2011 at 8:38 PM, Dean E. Weimer wrote: >> I have been doing some work with cleaning up my log files to make >> them >> easier to read, and for the life of me can't figure out how to get >> my >> IPFilter logs to stop going into the /var/log/messages log. I have a >> syslog entry for local0.* /var/log/ipfilter.log which works great, >> and >> captures all the logs I want. I have tried adding local0.none on the >> /var/log/messages line, but it seems to have no effect. Can anyone >> tell >> me what I am doing wrong here, the below lines are from my >> syslog.conf >> configuration file. >> > > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local0.none >> /var/log/messages local0.* /var/log/ipfilter.log > I usually do it this way: !-local0 # disable logging of local0 [log > whatever] /var/log/messages !local0 # enable logging of local0 > local0.* > /var/log/ipfilter.log Regards, -- Nino > _______________________________________________ > freebsd-questions@freebsd.org [2] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions [3] To > unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org > [4]" Interesting method, I will keep this in mind for the future. One thing to note, my config above seems to have started working after the messages log rotated. I had restarted the syslog process by running /etc/rc.d/syslogd restart, but for some reason these messages continued until the newsyslog process rotated the messages file. Now to get the rest of my servers local logs cleaned up and implement a new server for log consolidation. --- Thanks, Dean E. Weimer http://www.dweimer.net/