/var/log/messages logging

[kbannister]

We have a problem in that everytime we run a full back up the /var/log/messages file continuosly writes an error related to edirectory OID............. Subsequently the server will freeze and we need to re-boot it. Novell is working on fixing this. (Had a fix at one time. Then we did some patching and it's back). In the meantime is there a way to change the level of logging to the /var/log/messages file. I'm thinking if we stop these messages, which mean nothing to anyone, the server will not freeze and I won't have to get up in the middle of the night to re-boot. Thanks ahead!

SLES 10sp2 OES2sp1

[scathefire]

what logging mechanism are you using? syslog, syslog-ng?

[kbannister]

/etc/syslog-ng/syslog-ng.conf

[scathefire]

so you're probably looks like this:

filter f_messages   { not facility(news, mail) and not filter(f_iptables); };
...
destination messages { file("/var/log/messages"); };
log { source(src); filter(f_messages); destination(messages); };

you just have to add more filters, and send them to another destination

filter f_warn       { level(warn, err, crit) and not filter(f_iptables); };
destination warnings { file("/var/log/warn-messages"); };
log { source(src); filter(f_warn); destination(warnings); };