PDA

View Full Version : [all variants] Separate pam notifications from auth.log



Alekc
May 18th, 2008, 08:42 AM
Hello,
Currently my auth.log is spammed with entries like


May 18 06:56:01 ubuntu1 CRON[18881]: pam_unix(cron:session): session opened for user www-data by (uid=0)
May 18 06:56:02 ubuntu1 CRON[18881]: pam_unix(cron:session): session closed for user www-data
May 18 06:57:01 ubuntu1 CRON[18894]: pam_unix(cron:session): session opened for user www-data by (uid=0)
May 18 06:57:03 ubuntu1 CRON[18894]: pam_unix(cron:session): session closed for user www-data


since there are some cronjobs which are executed every minute. Is there any way to separate pam_unix cron session notifications from auth.log in (i.e) pam_cron.log?

If not it's realy boring to look through auth.log for seeking data. Thanks

brian_p
May 18th, 2008, 10:55 AM
Is there any way to separate pam_unix cron session notifications from auth.log in (i.e) pam_cron.log?

If not it's realy boring to look through auth.log for seeking data. Thanks

You could see what /etc/syslog.conf has to offer.