FreeNas 9.3 Syslog Debug messages

[BTW]

Hello,
I am trying to figure out how to stop debug messages from filling up my remote syslog server. I only want "info" + to record in my syslog.

Environment:
FreeNas = FreeNAS-9.3-STABLE-201506292130
Syslog = Ubuntu 12.04.5 LTS --> Rsyslog 5.8.6

Configs:
FreeNas -->

• General --> Syslog server = %ipaddress%
• Advanced --> Enable debug kernel = disabled
• System DataSet --> Syslog = enabled
• /etc/syslog.conf --> %see attached file = syslog.conf%
  • 

Syslog server --> %see attached file = syslogcapture%


Thanks
B

 

[Mirfster]

Not sure, but wouldn't that be a filter/rule on your Syslog Server instead or something on FreeNas? Also, I think that Rsyslog is well updated beyond 5.8.6 and perhaps a newer version is required to implement the filters/rules...

 

[Yatti420]

See here.. It's possible.. I've done it before.. Note I believe the FreeNAS base config will need changing aswell or resets/reboots will put it back to default..

https://www.freebsd.org/cgi/man.cgi...tion=5&apropos=0&manpath=FreeBSD+10.2-RELEASE

 

[Yatti420]

Try putting .none beside what you don't want going to /var/log/messages (I'm assuming your reading this file for syslong capture?) The examples on syslog page should be able point you in the right direction.. Once it's all satisfactory then consider changing the base.. Just beware you will not see what you filter...