LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-27-2006, 06:19 AM   #1
divukman
Member
 
Registered: Sep 2005
Location: Split, Croatia
Distribution: Gentoo/Debian
Posts: 140
Blog Entries: 8

Rep: Reputation: 15
Question removing cron entries from auth.log


Aloha all,

I'd like to remove cron.hourly entries from appearing in auth.log. I've done this by commenting out the cron.hourly line from /etc/crontab, but that's not the solution. Anything I can do with syslog-ng? Add some filter?

Thanks!
 
Old 05-27-2006, 06:48 AM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
Go to the cron.hourly directory and edit the files. For example:
/usr/sbin/mcelog --ignorenodev --filter >> /var/log/mcelog

Removing the ">>/var/log/mcelog" will stop the logging.
 
Old 05-27-2006, 06:53 AM   #3
divukman
Member
 
Registered: Sep 2005
Location: Split, Croatia
Distribution: Gentoo/Debian
Posts: 140

Original Poster
Blog Entries: 8

Rep: Reputation: 15
Lightbulb

I've added a filter to syslog-ng conf file. I think this should work.

Code:
# all messages from the auth and authpriv facilities
filter f_auth { facility(auth, authpriv);};

#filter the CRON messages
filter f_cron_msgs { not match("CRON*"); };


# auth,authpriv.*                 /var/log/auth.log
# + filter the CRON messages out
log {
        source(s_all);
        filter(f_auth);
        filter(f_cron_msgs);
        destination(df_auth);
};

Last edited by divukman; 05-27-2006 at 11:32 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
suspicious entry in /var/log/auth.log buehler Linux - Security 5 04-27-2005 06:11 PM
/var/log/auth.log entries buehler Linux - Security 1 04-23-2005 05:45 PM
weird stuff in /var/log/auth.log bschiett Linux - Security 3 03-12-2005 09:29 AM
LogWatch Cron :: Unmatched Entries elvisious Linux - Software 2 06-23-2004 08:10 AM
dual entries in cron log for cron.daily cpharvey Linux - General 3 02-27-2003 03:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 07:08 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration