Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using rsyslog.conf on Ubuntu -

The default line for /var/log/messages in 50-default.conf is:

*.*;auth,authpriv.none      -/var/log/syslog

I'm starting to log a lot of things at the local7 level - with a line like:

local7.*   /my/file/name

All of the local7 messages are showing up in /var/log/syslog, which of course is not what I want. I can't quite nail the filter syntax to remove them...

share|improve this question
up vote 3 down vote accepted

Add local7.none after authpriv.none.

The important thing is that local7.none (which excludes local7) comes after *.* (which includes local7) on the /var/log/syslog line.

share|improve this answer


local7.*   /my/file/name

local7.* ~

well before the line that references syslog

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.