Debian 10

I have a lot of log info like this:

localhost systemd[1]: Started Session 30522 of user xxxx.

How can I stop sshd to send logging info to sysconf ?

Thank you

I reproduced what the suggested link provided but it did not work for me. This is what I did:

I added a file in the /etc/rsyslog.d directory In this file I put the following command:

if $programname == "systemd" and ($msg contains "Removed session" or $msg contains "New session" or $msg contains "session-" or $msg contains "Started Session") then stop

I relaunched rsyslog:

systemctl restart rsyslog

but I still have, for example, Started Session 9999 of user foot in syslog file.



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.