12 Dec
2000
12 Dec
'00
9:47 a.m.
I would like to filter out kern.debug info from messages when we HUP syslog-ng. I have set up a filter: "filter f_kern.debug { not facility(kern); };" which filters out all kern messages from going to /var/adm/messages. I set up another filter "filter f_kern { facility(kern); };" that logs to destination file /var/log/kern.log" so I can pick up any other kernel messages. Is there a way to set up a filter for facilty(kern) that will filter out the debug info but still log the higher level messages to /var/adm/messages? We are running on Solaris 2.6.
filter f_kern { facility(kern) and not level(debug); }; -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt