HOWTO vixie-cron notes - Revision history

Gordp at 19:22, 8 February 2008

2008-02-08T19:22:29Z

@@ Line 1: / Line 1: @@
 On a '''hardened''' gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages.  They are far too verbose :-(  Cut down on the clutter by editing and adding the red/bold change:
@@ Line 28: / Line 30: @@
 [[Typical workstation syslog-ng.conf]]
 <br>

Gordp at 19:17, 8 February 2008

2008-02-08T19:17:54Z

← Older revision		Revision as of 19:17, 8 February 2008
Line 22:		Line 22:
	Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)		Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)
	<hr>		<hr>
	For Reference, here are a ~~number~~ of example syslog-ng.conf files:		For Reference, here are a couple of example syslog-ng.conf files:

	[[Typical hardened syslog-ng.conf]]		[[Typical hardened syslog-ng.conf]]

Gordp at 19:17, 8 February 2008

2008-02-08T19:17:24Z

← Older revision		Revision as of 19:17, 8 February 2008
Line 2:		Line 2:

	<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''		<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''

	filter f_auth { facility(auth); };		filter f_auth { facility(auth); };
	filter f_authpriv { facility(auth, authpriv); };		filter f_authpriv { facility(auth, authpriv); };

Gordp at 19:17, 8 February 2008

2008-02-08T19:17:14Z

← Older revision		Revision as of 19:17, 8 February 2008
Line 2:		Line 2:

	<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''		<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''
			filter f_auth { facility(auth); };
			filter f_authpriv { facility(auth, authpriv); };
			filter f_syslog { not facility(authpriv, mail); };
			filter f_cron { facility(cron); };
			filter f_daemon { facility(daemon); };
			filter f_kern { facility(kern); };
			filter f_lpr { facility(lpr); };
			filter f_mail { facility(mail); };
			filter f_user { facility(user); };
			filter f_uucp { facility(uucp); };
			#filter f_ppp { facility(ppp); };
			filter f_news { facility(news); };
			filter f_debug { not facility(auth, authpriv, news, mail); };
	filter f_messages { level(info..warn)		filter f_messages { level(info..warn)
	and not facility(auth, authpriv, mail, news, <font color=red>'''cron'''</font>); };		and not facility(auth, authpriv, mail, news, <font color=red>'''cron'''</font>); };
			filter f_emergency { level(emerg); };

	Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)		Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)

Gordp at 19:15, 8 February 2008

2008-02-08T19:15:54Z

← Older revision		Revision as of 19:15, 8 February 2008
Line 11:		Line 11:

	[[Typical hardened syslog-ng.conf]]		[[Typical hardened syslog-ng.conf]]

	~~[[Typical server syslog-ng.conf]]~~

	[[Typical workstation syslog-ng.conf]]		[[Typical workstation syslog-ng.conf]]
	<br>		<br>

Gordp at 19:06, 8 February 2008

2008-02-08T19:06:39Z

← Older revision		Revision as of 19:06, 8 February 2008
Line 9:		Line 9:
	<hr>		<hr>
	For Reference, here are a number of example syslog-ng.conf files:		For Reference, here are a number of example syslog-ng.conf files:

	[[Typical hardened syslog-ng.conf]]		[[Typical hardened syslog-ng.conf]]

	[[Typical server syslog-ng.conf]]		[[Typical server syslog-ng.conf]]

	[[Typical workstation syslog-ng.conf]]		[[Typical workstation syslog-ng.conf]]
	<br>		<br>

Gordp at 19:06, 8 February 2008

2008-02-08T19:06:15Z

← Older revision		Revision as of 19:06, 8 February 2008
Line 1:		Line 1:
	On a hardened gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages. They are far too verbose :-( Cut down on the clutter by editing and adding the red/bold change:		On a '''hardened''' gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages. They are far too verbose :-( Cut down on the clutter by editing and adding the red/bold change:

	<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''		<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''
Line 7:		Line 7:

	Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)		Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)
			<hr>
			For Reference, here are a number of example syslog-ng.conf files:
			[[Typical hardened syslog-ng.conf]]
			[[Typical server syslog-ng.conf]]
			[[Typical workstation syslog-ng.conf]]
			<br>

Gordp at 18:35, 8 February 2008

2008-02-08T18:35:50Z

← Older revision		Revision as of 18:35, 8 February 2008
Line 1:		Line 1:
	On a hardened gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages. They are far too verbose :-( Cut down on the clutter by editing and ~~making~~ the red/bold ~~changes~~:		On a hardened gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages. They are far too verbose :-( Cut down on the clutter by editing and adding the red/bold change:

	<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''		<font color=red>hostname</font> <font color=blue>~ #</font> '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''

Gordp at 18:35, 8 February 2008

2008-02-08T18:35:09Z

← Older revision		Revision as of 18:35, 8 February 2008
Line 5:		Line 5:
	filter f_messages { level(info..warn)		filter f_messages { level(info..warn)
	and not facility(auth, authpriv, mail, news, <font color=red>'''cron'''</font>); };		and not facility(auth, authpriv, mail, news, <font color=red>'''cron'''</font>); };

			Minute-by-minute cron messages are still logged, but only to /var/log/cron.log, '''not''' the main /var/log/messages file. Sanity is restored :-)

Gordp at 18:33, 8 February 2008

2008-02-08T18:33:24Z

New page

On a hardened gentoo machine, the main /var/log/messages file becomes hugely cluttered with the minute-by-minute cron messages. They are far too verbose :-( Cut down on the clutter by editing and making the red/bold changes:

hostname ~ # '''emacs -nw /etc/syslog-ng/syslog-ng.conf'''

filter f_messages { level(info..warn)
and not facility(auth, authpriv, mail, news, '''cron'''); };