I have an application which logs to syslog facility local1. I would like to configure syslog to send all local1 messages to a log file separate from /var/log/messages — that turned out to be easy. But the messages are also going to /var/log/messages. is there some way to tell syslog to send *.info to /var/log/messages but exclude local1.info? (Something like *^loacl1.info ?)
syslog.conf:
#kern.* /dev/console
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
local0.notice;local0.debug;mail.*;mail.none;mail.info;local0.info /var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
#My Custom App Logging
local1.* /var/log/application.log
Best Answer
Try replacing
by
This will log message that match : any facility with level info AND facility not mail AND facility not authpriv AND facility local1 execpt when level is info.