Script for not to see any line on syslog

[Utpal Krishna]

Hi
Can anyone tell me any script with what I don't want to see any particular line "Session closed" in my syslog which comes every frequently


Utpal

[Bill Hassell · Accepted solution]

grep -v -i "session closed" /var/adm/syslog/syslog.log

You might want to add other filters by using -e as in:

grep -v -i -e "session closed" -e anonymous login" -e "accepted password" /var/adm/syslog/syslog.log

[Steven E. Protter]

cat /var/adm/syslog/syslog.log | grep -v Session

SEP

[Utpal Krishna]

Hi
thanks for your mail.

But my question was not to see session closed rather to see see session closed. with your command I can on Session closed but I don't want to see that.
Thanks

[Thayanidhi]

Hi,

check the man page ftpd.

ftpd -l makes the log in syslog.log

You may disable -l option ftpd in "/etc/inetd.conf" file and restart ftpd.

Then you will never know some one used the ftp on the server.

TT

[Utpal Krishna]

Thanks for the reply that will close down(Hide)totally the FTP from the syslog but I don't want to do that I want a script P to appear on syslog but when I will run that script FTP session closed will not be seen.
Can anyone tellme the script regarding that

Thanks
Utpal

[T G Manikandan]

Bill has provided the right way
grep -v -i "session closed" /var/adm/syslog/syslog.log
will not take up the session closed messages from syslog.

Please explain what you want in detail!!

[Madhu Sudhan_1]

Utpal,
If you don't want to log messages session closed then go with above update. Otherwise use

grep -i "session closed" /var/adm/syslog/syslog.log

-Madhu

[Thayanidhi]

Hi,

If I understand you correctly, you want
ftpd to log the login information but don't want log "session closed" to syslog.

I don't think it's possible. I checked man page of ftpd.

Either you can enable logging by -l option or disable.
It's not possible to partially omit the log information.

Best way is create new syslog.new file extracted from current syslog and
use this file for your use.

# cd /var/adm/syslog
# grep -v "session closed" syslog.log > syslog.new

Regards

TT

[Utpal Krishna]

Thank you all for nice reply.
My purpose is solved.

Utpal