On 2018-07-29 00:43, David Lang wrote: > the output in RSYSLOG_DebugFormat of the messages you are interested in > suppressing would be very useful
Ok, I wrote the following rule at the very top of the file prior to my stop rules: :msg, contains, "dwc_otg" /var/log/rsyslogdebug.log I then triggered the warning and this is the result: Debug line with all properties: FROMHOST: 'mail', fromhost-ip: '127.0.0.1', HOSTNAME: 'mail', PRI: 4, syslogtag 'kernel:', programname: 'kernel', APP-NAME: 'kernel', PROCID: '-', MSGID: '-', TIMESTAMP: 'Jul 29 09:45:07', STRUCTURED-DATA: '-', msg: '[684022.122922] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' escaped msg: '[684022.122922] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' inputname: imklog rawmsg: '[684022.122922] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' $!: $.: $/: Debug line with all properties: FROMHOST: 'mail', fromhost-ip: '127.0.0.1', HOSTNAME: 'mail', PRI: 4, syslogtag 'kernel:', programname: 'kernel', APP-NAME: 'kernel', PROCID: '-', MSGID: '-', TIMESTAMP: 'Jul 29 09:45:07', STRUCTURED-DATA: '-', msg: '[684022.125383] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' escaped msg: '[684022.125383] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' inputname: imklog rawmsg: '[684022.125383] WARN::dwc_otg_handle_mode_mismatch_intr:68: Mode Mismatch Interrupt: currently in Host mode' $!: $.: $/: I had left the stop rules in place after the debug rule and the empty messages showed up in /var/log/kern.log and /var/log/messages: /var/log/kern.log: 2018-07-29T09:45:07.010780-07:00 mail kernel: [684022.125383] (there is a trailing single space) And also in /var/log/messages: 2018-07-29T09:45:07.010780-07:00 mail kernel: [684022.125383] (there is a trailing single space) _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
