Debian 10
I have a lot of log info like this:
localhost systemd[1]: Started Session 30522 of user xxxx.
How can I stop sshd to send logging info to sysconf ?
Thank you
I reproduced what the suggested link provided but it did not work for me. This is what I did:
I added a file in the /etc/rsyslog.d directory In this file I put the following command:
if $programname == "systemd" and ($msg contains "Removed session" or $msg contains "New session" or $msg contains "session-" or $msg contains "Started Session") then stop
I relaunched rsyslog
:
systemctl restart rsyslog
but I still have, for example, Started Session 9999 of user foot
in syslog file.