How to filter cron messages in syslog-ng

Software SW tweaks
1

Hello, I am fighting with filtering of cron messages in syslog-ng.
I tried several ways - one of them:

filter f_turris_iptables {
not match(".turris[^:]: .*" value(MESSAGE)) or not level(debug) or
** match("/usr/sbin/cron" value(MESSAGE));**
};

but cron is still flooding my syslog.

2

Hi,

take a look into this PR: https://github.com/CZ-NIC/turris-os-packages/pull/26

It works very well for me.

3

Thank you, that really helped!
My configuration (for remote logging): /etc/syslog-ng.d/remote.conf

destination d_loghost { udp(“x.x.x.x”); };
filter f_cron { not program(“.cron.”); };
log {
source(src);
source(kernel);
filter(f_cron);
destination(d_loghost);
};