/etc/rsyslog.conf, I have the following line to log the
auth facility into
but the file is flooded with cron logs, such as these:
CRON: pam_unix(cron:session): session opened for user root by (uid=0) CRON: pam_unix(cron:session): session closed for user root
I would like to get rid of the cron logs, and only have real "auth" events being logged into that file. By that I mean, I want to see which users have logged into the system, or made
How can I achieve that?