-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 My rsyslog is configured to log messages from the router into a file like this: #CER: router messages into a separate file and stop further processing. # http://wiki.rsyslog.com/index.php/Sysklogd_drop-in_with_remote_logs_separate... # ^program-to-execute;template - doc: rsyslog_conf_actions.html if ($source == 'router') and ($msg contains 'Received valid IP address from server. Connection UP.') then \ ^/usr/local/bin/askandlogexternalIP_sh if ($source == 'router') then \ -/var/log/router & ~ so far so good. A bit later there is this default setting: # Emergency messages to everyone logged on (wall) *.emerg :omusrmsg:* The problem is that emergency messages from the router are also printed on all terminals; and the router booting is considered and emergency. Like this: cer@Telcontar:~> Message from syslogd@BCM96345 at Oct 9 19:25:15 ... started: BusyBox v0.60.4 (2005.10.07-11:27+0000) Message from syslogd@BCM96345 at Oct 9 19:28:39 ... started: BusyBox v0.60.4 (2005.10.07-11:27+0000) How can I stop those emergency messages from the router being displayed everywhere? [thinking] I have seen this rule in the wiki indicated above: # Everybody gets emergency messages #*.emerg * if \ $source == 'localhost' \ and \ $syslogseverity-text == 'emerg' \ then * which looks interesting. I wonder how to integrate both. Perhaps this: if ($source == 'localhost') and ($syslogseverity <= 0 /* emergency */) then :omusrmsg:* would that be correct? - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iEYEARECAAYFAlB0i14ACgkQtTMYHG2NR9U1cACfcvyYdC7FHxkCH4t0qPseCZOS dggAn127cQd7FWlY2fak7b+V78vsZVuV =aRXX -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org