On Samstag, 3. März 2018 23:31:00 CET Michael Hirmke wrote:
Hi Carlos,
[...]
indeed, my remote syslog-ng, which receives all that crap, can't keep u=
p
with all those messages from several clients.
drop them at syslog.ng?
I could do that, but the necessary rules will kill syslog-ng, too.
Syslog-ng is killed by a single rule? wow ... https://syslog-ng.com/documents/html/syslog-ng-pe-latest-guides/en/syslog-ng... Just filter for _SYSTEMD_SLICE=system.slice, if you are only interested in system messages, not messages from the user sessions. Note, messages from the user sessions where already sent to the user journals, depending on the program. All Gnome programs sent their messages to the journal, everything dbus activated (e.g. kscreen) already sent their stdout/ stderr to the journal, ... Regards, Stefan -- Stefan Brüns / Bergstraße 21 / 52062 Aachen home: +49 241 53809034 mobile: +49 151 50412019