Apr 222008

Sponsored Link

If you check your /var/log/messages file you can see lot of messages with -Mark- these are useless.You can disable them with the following procedure.

Edit /etc/defaults/syslogd file

#vi /etc/defaults/syslogd

Change the SYSLOGD option to the following

SYSLOGD="-m 0″

Save and exit the file

Restart syslogd using the following comamnd

#invoke-rc.d sysklogd restart

 Posted by at 4:36 pm

  4 Responses to “How to disable the “– MARK –” in Debian log file”

  1. Actually, the MARK messages are not useless. They let you know that syslogd is still working if a period of time (by default 20 minutes) passes without anything else being logged.

  2. Yep, they’re there for a reason. I think they’re helpful for security auditing (validating of logs) as well as for confirmation that syslog is working, as Randall said.

  3. Perhaps useful in some rare situations, such as a central syslog server, but for most implementations there is no requirement to ‘prove’ that syslog is working, so all it does is create logs full of nothing but that MARK entry. Not useful.

  4. /etc/defaults ? Not /etc/default ?

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>