Project

General

Profile

Actions

Bug #13476

closed

External syslog receives tons of "send to syslog" messages

Added by Louis B over 1 year ago. Updated over 1 year ago.

Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Logging
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
Affected Architecture:
All

Description

When forwarding messages to an external syslog system, I get tons of messages in that system telling that a message has been send to the syslog server.
"<78>1 2022-09-09T09:49:00.054868+02:00 pfSense.lan /usr/sbin/cron 59745 - - (root) CMD (/usr/sbin/newsyslog)" That can not be the intention IMHO

Actions #1

Updated by Jim Pingle over 1 year ago

  • Status changed from New to Not a Bug

When you have syslog send all messages it does just that, sends all messages, and that includes messages from when cron runs every job, which happens every minute for newsyslog.

There is no way to exclude just those messages from being sent when you tell syslog to send everything. Your log server should have a facility to filter those messages if you don't want them.

Actions

Also available in: Atom PDF