Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Using rsyslog.conf on Ubuntu -

The default line for /var/log/messages in 50-default.conf is:

*.*;auth,authpriv.none      -/var/log/syslog

I'm starting to log a lot of things at the local7 level - with a line like:

local7.*   /my/file/name

All of the local7 messages are showing up in /var/log/syslog, which of course is not what I want. I can't quite nail the filter syntax to remove them...

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

Add local7.none after authpriv.none.

The important thing is that local7.none (which excludes local7) comes after *.* (which includes local7) on the /var/log/syslog line.

share|improve this answer
add comment


local7.*   /my/file/name

local7.* ~

well before the line that references syslog

share|improve this answer
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.