Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Telling syslog-ng to ignore messages
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo
View previous topic :: View next topic  
Author Message
KShots
Guru
Guru


Joined: 09 Oct 2003
Posts: 593
Location: Florida

PostPosted: Tue Jul 10, 2007 1:57 pm    Post subject: Telling syslog-ng to ignore messages Reply with quote

How do I tell syslog-ng to ignore a specific kernel message (as in not to record it to its log)?

I'm getting a flood of the following, turning my log file into a huge file (you can see how often it is reported by the time stamps):
Code:
Jul 10 07:59:09 madusa eth0: freeing mc frame.
Jul 10 07:59:11 madusa eth0: freeing mc frame.
Jul 10 07:59:13 madusa eth0: freeing mc frame.
Jul 10 07:59:15 madusa eth0: freeing mc frame.
Jul 10 07:59:17 madusa eth0: freeing mc frame.
Jul 10 07:59:21 madusa eth0: freeing mc frame.
Jul 10 07:59:23 madusa eth0: freeing mc frame.
Jul 10 07:59:23 madusa eth0: freeing mc frame.
Jul 10 07:59:29 madusa eth0: freeing mc frame.
Jul 10 07:59:30 madusa eth0: freeing mc frame.
Jul 10 07:59:35 madusa eth0: freeing mc frame.
Jul 10 07:59:39 madusa eth0: freeing mc frame.
Jul 10 07:59:40 madusa eth0: freeing mc frame.
Jul 10 07:59:44 madusa eth0: freeing mc frame.
Jul 10 07:59:49 madusa eth0: freeing mc frame.
Jul 10 07:59:49 madusa eth0: freeing mc frame.
Jul 10 07:59:55 madusa eth0: freeing mc frame.
Jul 10 07:59:55 madusa eth0: freeing mc frame.
Jul 10 08:00:01 madusa eth0: freeing mc frame.
Jul 10 08:00:02 madusa eth0: freeing mc frame.
I've made a post in the past on resolving the actual issue described, but as nobody ever responded I assume it's not resolvable (and in the end it appears the machine is still functional). So how do I convince syslog to completely ignore this message and quit flooding out the important messages?
_________________
Life without passion is death in disguise
Back to top
View user's profile Send private message
joyo222
n00b
n00b


Joined: 18 May 2006
Posts: 44

PostPosted: Tue Jul 10, 2007 6:48 pm    Post subject: Reply with quote

hi,
I don't know how you have syslog-ng set up right now, but you could make a filter on that specific message I guess:

/etc/syslog-ng/syslog-ng.conf:
Code:
filter f_annoying { not match("freeing mc frame"); };
...
...
log { source(src); filter(f_annoying); destination(messages); };


you can check out "man syslog-ng.conf" for some info (it's pretty concise...).
Back to top
View user's profile Send private message
KShots
Guru
Guru


Joined: 09 Oct 2003
Posts: 593
Location: Florida

PostPosted: Tue Jul 10, 2007 7:19 pm    Post subject: Reply with quote

Thanks, that little scrap of info helped me understand the syslog filter (previously I was just declaring the filter... I also had to include the filter in the log itself).
_________________
Life without passion is death in disguise
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum