On Thu, Nov 21, 2002 at 04:39:43PM -0500, Jeffrey Wheat wrote:
> This may be a stupid question but I am asking anyway. I just recently started
> to use syslog for my logging in order to gather stats and such. In the process
> of writing a script to monitor the log file, I noticed that I am getting duplicate
> entries like this:
>
> Nov 21 16:33:33 mail exim[50884]: 2002-11-21 16:33:33 H=to7.senderlist5682.com [12.158.236.70] F=<dneu9@???> rejected RCPT <user@???>: host is listed in sbl.spamhaus.org
> Nov 21 16:33:33 mail exim[50884]: 2002-11-21 16:33:33 H=to7.senderlist5682.com [12.158.236.70] F=<dneu9@???> rejected RCPT <user@???>: host is listed in sbl.spamhaus.org
>
> Obviously this will make the logs much bigger than they need to be for starters.
> Is there a way to correct this so that I only get one entry?
>
Check out your syslogd.conf file. You're probably logging both mail.log
and mail.err to the same file, hence the duplicate entries. (just my
guess ;)
> Many thanks,
> Jeff
Kind regards,
Chris
--
Christopher Bodenstein - christopher.bodenstein@???
Systems Administrator - Easynet Belgium
Great acts are made up of small deeds.
-- Lao Tsu