How to disable the “– MARK –” in Debian log file
Posted by Admin on April 22nd, 2008
If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!
Edit /etc/defaults/syslogd file
#vi /etc/defaults/syslogd
Change the SYSLOGD option to the following
SYSLOGD=”-m 0″
Save and exit the file
Restart syslogd using the following comamnd
#invoke-rc.d sysklogd restart
April 22nd, 2008 at 6:12 pm
Actually, the MARK messages are not useless. They let you know that syslogd is still working if a period of time (by default 20 minutes) passes without anything else being logged.
April 23rd, 2008 at 9:50 am
Yep, they’re there for a reason. I think they’re helpful for security auditing (validating of logs) as well as for confirmation that syslog is working, as Randall said.
June 6th, 2008 at 7:15 pm
Perhaps useful in some rare situations, such as a central syslog server, but for most implementations there is no requirement to ‘prove’ that syslog is working, so all it does is create logs full of nothing but that MARK entry. Not useful.