topic Re: Excessive Logging in Operating System - HP-UX

Excessive Logging

Nobody's Hero — Tue, 28 Oct 2008 13:22:03 GMT

In the past I have eliminated syslog entries by using syslog-ng. Great product for managing logs. However, now I have 3 servers that are not allowd to use syslog-ng. Period.

Is there a way I can control what gets logged to the authlog? Im not too worried about syslog. Its the authlog that is creating a huge amount of entries.

Re: Excessive Logging

Steven E. Protter — Tue, 28 Oct 2008 13:43:35 GMT

Shalom,

The authlog is a critical log for compliance with SOX. You should try frequently copying it off (logrotate) versus trying to reduce entries.

SEP

Re: Excessive Logging

Nobody's Hero — Tue, 28 Oct 2008 13:46:29 GMT

I figured so, thanks anyway.

Re: Excessive Logging

Nobody's Hero — Tue, 28 Oct 2008 13:46:53 GMT

Closed.

Re: Excessive Logging

TTr — Tue, 28 Oct 2008 13:49:27 GMT

What entries do you have in your /etc/syslog.conf file for auth.xxxx ?
You could remove the "auth.debug" if it is in there and reload syslogd with "kill -HUP ".