1

Debian 10

I have a lot of log info like this:

localhost systemd[1]: Started Session 30522 of user xxxx.

How can I stop sshd to send logging info to sysconf ?

Thank you


I reproduced what the suggested link provided but it did not work for me. This is what I did:

I added a file in the /etc/rsyslog.d directory In this file I put the following command:

if $programname == "systemd" and ($msg contains "Removed session" or $msg contains "New session" or $msg contains "session-" or $msg contains "Started Session") then stop

I relaunched rsyslog:

systemctl restart rsyslog

but I still have, for example, Started Session 9999 of user foot in syslog file.

2

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.