Sun Solaris 9.0 : how to reduce syslog level msg

[3042]

I am running Sun Solaris 9.0.It seems it got a lot of access-list message from PIX on /var/adm/messages.But,it's fine on /var/log/syslog_info.Anyway that I can reduce this syslog level message,so that unnecessary access-list msg would be denied.

 

[daFranze]

man syslog.conf?

vi /etc/syslog.conf

there you can find a line similar to

blabla /var/log/syslog_info

what is blabla? I guess it's local0.info (it might be something else, not local0), change info to warning and send the syslog-process a HUP-Signal (kill -HUP processid)

--------------------from manpage syslog.conf (Solaris 7)------------------
      Recognized values for level  are  (in  descending  order  of
     severity):

     emerg     For panic conditions that would normally be broad-
               cast to all users.

     alert     For conditions that should  be  corrected  immedi-
               ately, such as a corrupted system database.

     crit      For warnings about critical  conditions,  such  as
               hard device errors.

     err       For other errors.

     warning   For warning messages.

               notice For conditions that are  not  error  condi-
               tions,  but may require special handling. A confi-
               guration entry with a level value of  notice  must
               appear on a separate line.

     info      Informational messages.

     debug     For messages that  are  normally  used  only  when
               debugging a program.

     none      Do not send messages from the  indicated  facility
               to the selected file. For example, a selector of

               *.debug;mail.none

               will send all messages except mail messages to the
               selected file.


Regards
-- Franz
Sorry I'm not a native spaeker, I'm from [b]Munich, Germany[/b] - "Home of the Whopper", oh no, "Home of the Oktoberfest" ;-)

 

[3042]

HI Franz,
Unnecessary msg only observed on "/var/adm/messages" and NOT on "/var/log/syslog_info.

Here the syslog.conf

*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages
local7.info /var/log/syslog_info

Do I only need only to replace from local7.info to local7.warning ?

Thame

 

[daFranze]

Thame,

ok, I think I understand:

please order (syslogd uses the first match rule) the entries in syslog.conf:
local7.warning (here is a TAB, not blank blank blank!) /var/log/syslog_info
*.err;kern.debug;daemon.notice;mail.crit TABagain! /var/adm/messages

does the file /var/log/syslog_info exist? if not create it!
send HUP to syslogd and try again

If it doesn't work:
/etc/init.d/syslog stop
/usr/sbin/syslogd -d
please post the output






Regards
-- Franz
Sorry I'm not a native spaeker, I'm from Munich, Germany - "Home of the Whopper", oh no, "Home of the Oktoberfest" ;-)