View Single Post
  #5  
Old 18th May 2009, 08:47
martin1977 martin1977 is offline
Junior Member
 
Join Date: May 2009
Posts: 20
Thanks: 0
Thanked 3 Times in 3 Posts
Default

OK, now comes the GOOD solution.
forget about the last post - that one might be the solution for "old school" syslog users but since I use rsyslog there is a much better way:

Simply replace the old
Code:
auth,authpriv.*                 /var/log/auth.log
with
Code:
:msg, contains, "pam_unix(cron:session)"  ~
auth,authpriv.*                 /var/log/auth.log
This would write everything into /var/log/auth.log BUT messages that contain "pam_unix(cron:session)". (Please note that the tilde "~" at the end of the line is required)
This is exactly what at least I was searching for. Rsyslog has much more fun functionallity and it is worth to have a closer look into it.

Best regards,
Martin
Reply With Quote