Filter syslog messages.

mahive · #1 (**permalink**) 07-01-2009

Hello,

How can we filter messages like :

indrh03 sshd[21250]: Accepted publickey for score from 192.168.18.47 port 51034 ssh2
indrh03 sshd[21250]: pam_unix(sshd:session): session opened for user score by (uid=0)
indrh03 sshd[21250]: pam_unix(sshd:session): session closed for user score

such that they are not written to log files (for exaple on system indrh03 in secure, sudolog, etc).

Thanks&Regards,
Mahive.

sysgate · #2 (**permalink**) 07-03-2009

You can decrease the level of verbosity given by the SSH daemon by altering the LogLevel directive in your sshd.conf. The possible values are: QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2 and DEBUG3.

s93366 · #3 (**permalink**) 07-03-2009

You could also replace the standard syslogd with syslog-ng if you need to filter.

mahive · #4 (**permalink**) 07-03-2009

Hello,
Thanks a lot for your reply. Could you please let me know which sshd.conf are you referring to? I have tried to modify the value to QUIET under /etc/sshd/sshd_config and also commented the below mentioned lines under /etc/log.d/conf/services/sshd.conf to no effect.

LogFile = secure
LogFile = messages

Regards,
Mahive.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
syslog messages.	cabloy	Red Hat	1	04-06-2009 09:54 AM
Getting error messages in syslog in HP-UX	Mike1234	HP-UX	2	12-03-2008 10:28 AM
Help with separating syslog messages.	raj_26apr	Shell Programming and Scripting	2	11-18-2008 07:26 PM
syslog messages every minute	hcclnoodles	SUN Solaris	1	11-06-2006 10:20 AM
sort syslog messages	3Gmobile	Shell Programming and Scripting	1	08-10-2006 11:00 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: