Syslog Removal Rule Filters issue

[sharekhan]

Hi Sir ,

How do i create rule for syslog message ,

using Syslog 1.22 .

I had created but it is not working , do i am doing any wrong, i had attached the screenshot of created removals rule .

pls help how the removals rule can be created.

[JohnYYC]

Change "String Match Type" to "Contains". That should do the trick.

[sharekhan]

Hi sir ,

I had change the setting as per said , but no success

Even i had change one by one String Match Type , for message removals

still i cant able to remove the messages , and the logs are coming heavy.

pls help....

[sharekhan]

sir pls help.

[sharekhan]

sir pls help

[sharekhan]

Hi sir ,

I had done the process as you said , but no success . pls help me how to do .
Change "String Match Type" to "Contains"

[sharekhan]

Hi sir,

I am getting the error will applying Syslog Removal Rule Filters

09/05/2012 02:55:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'1064', SQL:"DELETE FROM `syslog`.`syslog_incoming` WHERE message LIKE '%'Connection from UDP'%' AND status='113''



Pls help

[sharekhan]

pls help to remove the syslog unwanted log.

i tried the Removal Rule Edit option with multiple String Match Type but its not working .after adding rule of removal then to the logs are not getting deleted from syslog.

i want help my server disk is getting full due to unwanted log of syslog.

[sharekhan]

Syslog Removals problem

i am using sql string
facility='syslog' AND priority='Info' AND message='CMD'

then to the message are not deleting from syslog.

even no error in Cacti Log File

pls help.. to resolve the issue or share some trick to resolve it....

[cigamit]

message='CMD'

so your saying the full syslog message you are wanting to remove is "CMD" and there is no other text in the message?

[sharekhan]

pls help to remove the syslog unwanted log.

i tried the Removal Rule Edit option with multiple String Match Type but its not working .after adding rule of removal then to the logs are not getting deleted from syslog.

i want help my server disk is getting full due to unwanted log of syslog.

Syslog Removals problem

i am using sql string
facility='syslog' AND priority='Info' AND message='CMD'

then to the message are not deleting from syslog.

even no error in Cacti Log File

pls help.. to resolve the issue or share some trick to resolve it....

[sharekhan]

i am using sql string
facility='syslog' AND priority='Info' AND message='(cacti) CMD (/usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1)'