Forum Discussion
Nimbostratussyslog messages - change logging level
Hello, I am receiving way to many syslog messages. I made sure in the gui that nothing is below the level of notice, but I am still getting alot of informational messages. How I can assure that I only receive notice and above? Thanks!
6 Replies
Brad_ParkerCirrus
If this is remote syslog you are talking about, take a look at this SOL. You will have to change your log level filters for remote syslog via tmsh.
https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13333.html
- Brad_ParkerI'd encourage you to look closer at step 3. This will allow you to configure syslog-ng to filter the messages being sent to the remote syslog server. You can do something like this: include " filter f_remote_loghost { level(notice..emerg); }; destination d_remote_loghost { udp(\"192.168.22.56\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_loghost); destination(d_remote_loghost); }; "
Brad_Parker_139Nacreous
If this is remote syslog you are talking about, take a look at this SOL. You will have to change your log level filters for remote syslog via tmsh.
https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13333.html
- Brad_Parker_139I'd encourage you to look closer at step 3. This will allow you to configure syslog-ng to filter the messages being sent to the remote syslog server. You can do something like this: include " filter f_remote_loghost { level(notice..emerg); }; destination d_remote_loghost { udp(\"192.168.22.56\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_loghost); destination(d_remote_loghost); }; "
- tolinrome_13817
Thanks but I'm still getting a severity of informational somehow.
sys syslog { auth-priv-from warning auth-priv-to emerg console-log enabled cron-from warning cron-to emerg daemon-from warning daemon-to emerg description none include none iso-date disabled kern-from debug kern-to emerg local6-from notice local6-to emerg mail-from notice mail-to emerg messages-from notice messages-to warning remote-servers { remotesyslog1 { description none host 192.168.22.56 local-ip none remote-port 514 } } user-log-from notice user-log-to emerg }
- tolinrome_13817
Realized it was this. https://support.f5.com/kb/en-us/solutions/public/16000/900/sol16932.html
