su --- Exclude Individual user from syslog.log

[NMory]

Hi guys,

A customer has the following messages in syslog:

Feb 7 12:18:01 su: + tty?? root-oracle
Feb 7 10:18:05 above message repeats 233 times
Feb 7 12:18:06 su: + tty?? root-oracle
Feb 7 12:38:04 su: + tty?? root-oracle

Is is it possible to exclude only the su of the "oracle" user from syslog.conf ???.

Just in case I know how to exclude ALL "su" messages in syslog.conf and/or how to send all su messages to another file that's not the syslog.log file.

Thanks,

NMory

[James R. Ferguson]

Hi:

Activity from 'su' is recorded in '/var/adm/sulog'.

Regards!

...JRF...

[Tim Nelson]

you can control what gets logged in the /etc/syslogd.conf file but it is probably an all or nothing.

[NMory]

JRF: I know su is also logged in '/var/adm/sulog', but what I want is to avoid having the su information for user oracle from being logged in the syslog. Just for this particular user.

Tim: Yeah that is what i am thinking...I am also guessing is all or nothing...

Thanks,

NMory

[NMory]

It seems that this is not possible. Have consulted with different resources.

Thanks anyway...