Linux syslog messages
 

Hi,
I'm new with syslog messages on Linux OS and I have a small question.
I configure my syslog to create messages for "auth.*".
Now when I log in the system I get the next message in my logs:

"pam_unix(login:session): session opened for user uri by LOGIN(uid=0)"

I wonder if control the message text?
Who create this message ?

Thanks

Not that easily. Hardest part would be to edit the source of the pam_module.
Depending if you are using syslog or rsyslog or another kind of "advanced" syslog daemon you could write a rule for this. But this totaly depends on the program that represents syslog on your system.

The message is created by the pam_module, which give it to syslog which writes it to the file (or someplace else if so configured).