3

I have odd problem with syslog local7, my syslog configure the syslog to be written to

local7.info /var/log/syslog_info

it's working just fine for years but recent days one device syslog message written on console and I don't know why this one device syslog on console but other hundreds of devices syslog still written on the file. my question question is how I can stop that? i need syslog from that device so i don't want to stop it but the same time i don't want to written on my console. my Os is 64 bit Solaris. thanks,

this is my syslog.conf

  #
  *.err;kern.notice;auth.notice         /dev/sysmsg
  *.err;kern.debug;daemon.notice;mail.crit  /var/adm/messages

  *.alert;kern.err;daemon.err           operator
  *.alert                       root

  *.emerg                       *

  # if a non-loghost machine chooses to have authentication messages
  # sent to the loghost machine, un-comment out the following line:
  #auth.notice          ifdef(`LOGHOST', /var/log/authlog, @loghost)

  mail.debug            ifdef(`LOGHOST', /var/log/syslog, @loghost)

 #
 # non-loghost machines will use the following lines to cause "user"
 # log messages to be logged locally.
  #
 ifdef(`LOGHOST', ,
 user.err                   /dev/sysmsg
 user.err                   /var/adm/messages
 user.alert                 `root, operator'
 user.emerg                 *
 )
 local7.info        /var/log/syslog_info
1
  • 1
    Can you post your syslog configuration?
    – larsks
    May 24, 2012 at 16:30

1 Answer 1

3

Your syslog configuration will log anything at err level and above to the system console due to this line:

 *.err;kern.notice;auth.notice         /dev/sysmsg

This logs everything at err and higher, kern messages at notice and higher, and auth message at notice and higher to the system console. If your device is logging messages at these levels this would explain the console messages.

You can suppress messages from the local7 facility using the none qualifier, like this:

*.err;kern.notice;auth.notice;local7.none         /dev/sysmsg

Try that and see if the console messages stop appearing.

2
  • great, that's solve the issue. thanks much for you time and good explanation.
    – eli1128
    May 24, 2012 at 17:40
  • @eli1128, If this answered your question, please consider taking a moment to mark the answer as accepted by clicking on the checkmark to the left of the answer. Thanks!
    – larsks
    May 24, 2012 at 17:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.