If there is no way to exclude it, try to make a new destination to /dev/null ? Kéven Belanger Analyste en solutions de sécurité Logicon Inc. - Division Sécurité 819.825.8049 x7717 800.567.6399 x7717 -----Original Message----- From: bhartin@straus-frank.com [mailto:bhartin@straus-frank.com] Sent: Wednesday, August 21, 2002 15:25 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]Supressing messages... I'm running syslog-ng-1.4.14-0. Long story short, I want to supress the logging of "VFS: Disk change detected..." messages that plague RH 7.1 installs using KDE w/autorun on CDs. Updating syslog-ng versions isn't happening anytime soon unless it is the only way to do so. What can I do to supress any and all logging of just this message, without affecting anything else in that group (kern.* or wherever it's at)? I'm sure newer versions have a working text based filter or such, but I'm pressed for time =(. Thanks for any help anyone can provide, -- Bradley Hartin - bhartin@straus-frank.com Communications and Network Administrator Straus-Frank Company _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html