You are not logged in.

#1 2012-10-02 20:21:24

vertsk
Member
Registered: 2012-10-02
Posts: 3

[SOLVED] having syslog-ng disregard message

My kernel log file is being flooded by the following message from HVR-1600 tuner card:

[89071.448942] cx18-0: Skipped encoder IDX, MDL 438, 1 times - it must have dropped out of rotation


I have tried adding the following lines to syslog-ng.conf:

filter f_tvtuner { not match("cx18-0" value ("MESSAGE")); };
log { source(src); filter(f_tvtuner); flags(final); };

I have also tried changing "cx18-0" to "MDL" and "match" instead of "not match" but nothing works to ignore all the messages.

Is this not possible with syslog-ng?  Is it possible to shut these messages off by the kernel module itself?

Last edited by vertsk (2012-10-02 23:57:03)

Offline

#2 2012-10-02 21:01:31

patroclo7
Member
From: Bassano del Grappa, ITALY
Registered: 2006-01-11
Posts: 913

Re: [SOLVED] having syslog-ng disregard message

I think that you need to define also a destination /dev/null. The filter should catch cx18-0 as a program and something in the message as match.
Perhaps (I have not tested what follows):

destination d_null { file("/dev/null"); };
filter f_tvtuner { program(cx18-0) and match(MDL); };
log { source(src); filter(f_tvtuner); destination{d_null}; flags(final); };

The log directive should be before any other log directive.


Mortuus in anima, curam gero cutis

Offline

#3 2012-10-02 21:36:02

vertsk
Member
Registered: 2012-10-02
Posts: 3

Re: [SOLVED] having syslog-ng disregard message

I have read that using "/dev/null" is bad because syslog-ng will change the permissions on the file.  From what I have read destination is not required in the log directive.

I tried "program(cx18-0)" and it still does not work.  I tried using the filter and redirecting the message to a different log file, but no messages showed up in the file.

It looks like my problem is:  What filter expression will actually capture these messages, so that I can re-route them?

Thanks.

Offline

#4 2012-10-02 23:56:29

vertsk
Member
Registered: 2012-10-02
Posts: 3

Re: [SOLVED] having syslog-ng disregard message

figured out the correct expression is:

filter f_tvtuner { not program(cx18-0); };
log { source(src); filter(f_tvtuner); flags(final); };

It needs to have "not" before program to match.  No destination in the log section results in no messages logged.

Offline

Board footer

Powered by FluxBB