Thanks James.  You wrote:
> Two of your answers lie in tuning your syslog daemon to only log what you
> want.  Usually located in /etc/syslog.conf, or /etc/rsyslog.d/*.conf.
> The third relies on google-fu.

What changes would you recommend in /etc/syslog.conf (quoted last below)?

# ls -ltr user.log syslog messages
-rw------- 1 root root 47853952 Sep  4 09:39 user.log
-rw------- 1 root root 47943929 Sep  4 10:28 syslog
-rw------- 1 root root 47949714 Sep  4 10:28 messages

These seem to be essentially redundant. Is it safe to eliminate some? and
which?

Although the greater question is why is are so many errors being posted?

-rw------- 1 root root      36384 Aug 12 03:53 user.log.4.gz
-rw------- 1 root root      39396 Aug 19 03:58 user.log.3.gz
-rw------- 1 root root      47818 Aug 25 14:40 user.log.2.gz
-rw------- 1 root root 2147483647 Aug 31 09:26 user.log.1
-rw------- 1 root root   47853952 Sep  4 09:39 user.log

/etc/syslog.conf contents:

$ cat syslog.conf
# Mandriva syslog configuration
# $Id: sysklogd.conf 93075 2007-09-26 13:02:56Z blino $

# sensible stuff
auth,authpriv.*                                 /var/log/auth.log

# generic stuff
*.info;mail,news,authpriv.none                  -/var/log/messages
*.*;auth,authpriv.none                          -/var/log/syslog
user.*                                          -/var/log/user.log

# Mail logging
mail.=debug;mail.=info;mail.=notice             -/var/log/mail/info.log
mail.=warn                                      -/var/log/mail/warnings.log
mail.err                                        -/var/log/mail/errors.log

# Cron logging
cron.=debug;cron.=info;cron.=notice             -/var/log/cron/info.log
cron.=warn                                      -/var/log/cron/warnings.log
cron.err                                        -/var/log/cron/errors.log

# Kernel logging
kern.=debug;kern.=info;kern.=notice             -/var/log/kernel/info.log
kern.=warn                                      -/var/log/kernel/warnings.log
kern.err                                        /var/log/kernel/errors.log

# Daemons logging
daemon.=debug;daemon.=info;daemon.=notice       -/var/log/daemons/info.log
daemon.=warn                                   
-/var/log/daemons/warnings.log
daemon.err                                      -/var/log/daemons/errors.log

# Drakxtools logging
local1.*                                        -/var/log/explanations

# Boot messages logging
local7.*                                        -/var/log/boot.log

# Emergency messages for logged users
*.emerg                                         *

# All messages on last terminal
*.*                                             /dev/tty12




---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss