The Thursday 2005-03-31 at 15:38 +0100, Paul Gardiner wrote:
Ta, but I really wanted to stop them going in at all. I do similar to what you suggest when monitoring, with the line
tail -f /var/log/mail | sed -e '/imapd/d'
I don't think you can. The syslog daemon records what the program tell it to record, with the "facility" and "priority" the program wants. Meaning that, yes, you have to recompile. However... there is some hope. SuSE definition in /etc/syslog.conf is mail.* -/var/log/mail I would recommend you try something like this instead: mail.notice -/var/log/mail mail.err /var/log/mail.err mail.debug -/var/log/mail.debug Now, file "/var/log/mail.debug" will have the same information as your old "/var/log/mail" had. But the new "/var/log/mail" will have much less information, only those of level "notice". Less verbose, that is. Then, you should also reconfigure logrotate appropriately. You can use different settings for each file. -- Cheers, Carlos Robinson