Mailinglist Archive: opensuse (924 mails)

< Previous Next >
[opensuse] Intrusive wall from rsyslog
  • From: "Carlos E. R." <carlos.e.r@xxxxxxxxxxxx>
  • Date: Tue, 9 Oct 2012 22:38:46 +0200 (CEST)
  • Message-id: <alpine.LNX.2.00.1210092216480.6918@Telcontar.valinor>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



My rsyslog is configured to log messages from the router into a file like this:

#CER: router messages into a separate file and stop further processing.
#
http://wiki.rsyslog.com/index.php/Sysklogd_drop-in_with_remote_logs_separated_by_dynamic_directory

# ^program-to-execute;template - doc: rsyslog_conf_actions.html
if ($source == 'router') and ($msg contains 'Received valid IP address
from server. Connection UP.') then \
^/usr/local/bin/askandlogexternalIP_sh

if ($source == 'router') then \
-/var/log/router
& ~


so far so good. A bit later there is this default setting:

# Emergency messages to everyone logged on (wall)
*.emerg :omusrmsg:*



The problem is that emergency messages from the router are also printed on all terminals; and the router booting is considered and emergency. Like this:

cer@Telcontar:~>
Message from syslogd@BCM96345 at Oct 9 19:25:15 ...
started: BusyBox v0.60.4 (2005.10.07-11:27+0000)

Message from syslogd@BCM96345 at Oct 9 19:28:39 ...
started: BusyBox v0.60.4 (2005.10.07-11:27+0000)



How can I stop those emergency messages from the router being displayed everywhere?

[thinking]

I have seen this rule in the wiki indicated above:

# Everybody gets emergency messages
#*.emerg *
if \
$source == 'localhost' \
and \
$syslogseverity-text == 'emerg' \
then *


which looks interesting. I wonder how to integrate both. Perhaps this:

if ($source == 'localhost') and ($syslogseverity <= 0 /* emergency */)
then :omusrmsg:*


would that be correct?

- -- Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)

iEYEARECAAYFAlB0i14ACgkQtTMYHG2NR9U1cACfcvyYdC7FHxkCH4t0qPseCZOS
dggAn127cQd7FWlY2fak7b+V78vsZVuV
=aRXX
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups