5

I have a very dramatic and hypocondriac program, and it likes to spew alarming messages to syslog in cases when nothing really important happens. Besides, it sends them with priority "alert", so they float above the rest of messages of lower priority (anything lower than "err"), that I usually skip. The messages have a very specific format that I could filter or match, given the tools.

Is it possible, using rsyslog, to change the priority of these messages so they become "warning"? I don't want to get rid of them, just put them in their proper place.

Improve this question
2
  • Seen you want to change the given priority, the configuration should be on the program's configuration side, and it's program dependent. It should be possible to archive something like that through rsyslog configuration, but not that advisable.
    – user1293137
    Aug 21, 2013 at 9:05
  • @user1293137, I've already checked that, and it doesn't seem possible. The program (vpnc) doesn't allow me to change its logging behaviour.
    – rsuarez
    Aug 21, 2013 at 10:32

1 Answer 1

Reset to default
3

It should be possible from within rsyslog.conf(5) (the file to edit is /etc/rsyslog.conf). You should find out which "facility" your application sends its logs under and maybe choose to dump its logs in a separate file.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .