Filter syslog messages.


 
Thread Tools Search this Thread
Operating Systems Linux Filter syslog messages.
# 1  
Old 07-01-2009
Filter syslog messages.

Hello,

How can we filter messages like :

indrh03 sshd[21250]: Accepted publickey for score from 192.168.18.47 port 51034 ssh2
indrh03 sshd[21250]: pam_unix(sshd:session): session opened for user score by (uid=0)
indrh03 sshd[21250]: pam_unix(sshd:session): session closed for user score



such that they are not written to log files (for exaple on system indrh03 in secure, sudolog, etc).

Thanks&Regards,
Mahive.


# 2  
Old 07-03-2009
You can decrease the level of verbosity given by the SSH daemon by altering the LogLevel directive in your sshd.conf. The possible values are: QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2 and DEBUG3.
# 3  
Old 07-03-2009
You could also replace the standard syslogd with syslog-ng if you need to filter.
# 4  
Old 07-03-2009
Hello,
Thanks a lot for your reply. Could you please let me know which sshd.conf are you referring to? I have tried to modify the value to QUIET under /etc/sshd/sshd_config and also commented the below mentioned lines under /etc/log.d/conf/services/sshd.conf to no effect.

LogFile = secure
LogFile = messages

Regards,
Mahive.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. SuSE

How to filter SYSLOG data to collect meaningful information only?

Dear users, SUSE 10 sp3 and SUSE 11. I made configuration changes in '/etc/syslog-ng/syslog-ng.conf' to move SYSLOG content to LogRhythm. This is what I changed in the file. Un-comment out the following lines #Enable this and admop IP to send log messages to... (10 Replies)
Discussion started by: JDBA
10 Replies

2. UNIX for Dummies Questions & Answers

Filter records in a huge text file from a filter text file

Hi Folks, I have a text file with lots of rows with duplicates in the first column, i want to filter out records based on filter columns in a different filter text file. bash scripting is what i need. Data.txt Name OrderID Quantity Sam 123 300 Jay 342 498 Kev 78 2500 Sam 420 50 Vic 10... (3 Replies)
Discussion started by: tech_frk
3 Replies

3. Solaris

Syslog duplicate messages

I've heard that syslog in Solaris10 doesn't repeat duplicate messages and displays "last message repeated n times." Is there a way to increase the time interval, so that more messages are recognized as duplicates? thanks. (0 Replies)
Discussion started by: orange47
0 Replies

4. AIX

Error messages in syslog

Hi, Can you please look into the below errors from syslog in AIX? And let me know is this a issue? How can I avoid these errors with out affecting my LPAR. Detail Data SYSLOG MESSAGE <27>Aug 23 08:24:28 syslog: slp: 0660-084 The SA failed to decode and compute received message:... (0 Replies)
Discussion started by: System Admin 77
0 Replies

5. AIX

syslog messages

Hi Is there any setting in the syslog.conf that I can define a string to disable certain type of message that is generated in the message file for example I want to stop these type of messages getting generated. UnablAug 18 07:06:30 local1:warn|warning KCML: WARNING /usr/local/kcml/kcml... (3 Replies)
Discussion started by: antointoronto
3 Replies

6. Red Hat

syslog messages.

Good Day. Any idea on the messages log. it would be a great help to us. Upon checking the on the system logs, I found the following messages: EXT3-fs: INFO: recovery required on readonly filesystem. EXT3-fs: write access will be enabled during recovery. kjournald... (1 Reply)
Discussion started by: cabloy
1 Replies

7. HP-UX

Getting error messages in syslog in HP-UX

Hi, I'm using HP-UX 11.11 on HP9000/800 PA-RISC system.I am getting the below messages daily in /var/adm/syslog/syslog.log file.Can someone help me out in this regard, why I am getting this messages & how to resolve it. I am using SSH version(HP-UX Secure Shell-A.04.20.004) Messages: Nov 26... (2 Replies)
Discussion started by: Mike1234
2 Replies

8. Shell Programming and Scripting

sort syslog messages

how can i sort the syslog message, so that the lastest time stamp show first , oldest show last. (1 Reply)
Discussion started by: 3Gmobile
1 Replies

9. Solaris

Filter out repeating messages

The unix servers at my site are constantly receiving "community check" messages from a server located on our WAN, in another city. Here is the example: Jan 23 15:41:08 eagles/usr/lib/snmp/snmpdx: community_check();bad community from rams.nw.sw.ournetwork.com How can I filter out these... (2 Replies)
Discussion started by: antalexi
2 Replies

10. UNIX for Dummies Questions & Answers

Date in syslog messages

Is there a way of configuring AIX syslog messages to include the year (not just month and day) (2 Replies)
Discussion started by: emilia
2 Replies
Login or Register to Ask a Question