How to stop writing local6 or other custom facility logs into `/var/log/messages`.

Solution Verified - Updated -

Issue

  • httpd logs are printing in /var/log/messages instead of /var/log/myhttpd.log while using local6 facility in httpd configuration.

  • Logs are being written to /var/log/messages instead of /var/log/audit/audit.log when audit plugin is configured with LOG_LOCAL6.

  • High volume of log entries in the /var/log/messages filling up /var and the file system is getting 100% occupied due to this issue.

Environment

  • Red Hat Enterprise Linux (All versions)
  • rsyslog

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content