-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/01/2014 11:53 AM, Kevin Wilson wrote:
> Hi,
>> I'm curious - why?
> The reason is quite simple:
> I am a kernel developer and sometimes ssh into my machine in
> several ssh sessions, many times during work sessions I monitor the
> kernel log by tail -f /var/log/messages, and any clutter of text
> simply distracts me and is not needed as I am working in an isolated
> LAN in a LAB, there is no outside access and no risk of penetration.
> I am sure there is a way to avoid this messages.
>
> Any ideas anyone?
>
>
> regards,
> Kevin
>

Please don't top post - it is confusing to read posts and replies out of order.

Instead of `tail -f /var/log/messages` use `journalctl -kf`.  "-k" filters to only kernel messages. If you want to see more, add more to the filter.


> On Mon, Sep 1, 2014 at 8:18 PM, Pete Travis <lists@petetravis.com> wrote:
>>
> On 08/30/2014 08:58 AM, Kevin Wilson wrote:
> >>> Hi,
> >>> Thanks. I checked all three options Rick suggested and none of them
> >>> worked.
> >>> Does anybody know about a solution which works ?
> >>>
> >>> regards,
> >>> Kevin
> >>>
> >>>
> >>> On Thu, Aug 21, 2014 at 10:57 PM, Rick Stevens <ricks@alldigital.com>
> wrote:
> >>>> On 08/21/2014 11:33 AM, Kevin Wilson issued this missive:
> >>>>
> >>>>> HI,
> >>>>> Each time I ssh with a putty client from windows to Linux Fedora 20, I
> >>>>> get the following
> >>>>> messages in the /var/log/messages file:
> >>>>> sshd[772]: pam_unix(sshd:session): session opened for user xxx by
> >>>>> (uid=yyy)
> >>>>>
> >>>>> Is there a way to prevent this messages ?
> >>>>
> >>>>
> >>>> Try editing /etc/ssh/sshd_config. set "LogLevel" to "QUIET", "FATAL"
> >>>> or "ERROR" (default is "INFO") and restart sshd via "systemctl restart
> >>>> sshd.service"
> >>>> ----------------------------------------------------------------------
> >>>>
>
> Hey Kevin,
>
> I'm curious - why?  I've found these messages to be very useful when
> troubleshooting or auditing remote connection attempts.  If you're
> looking at the logs and only want to see messages from a specific
> service, you can simply filter based on your needs at the time, ie
> `journalctl --since today --unit NetworkManager`.
>

- --
- -- Pete
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUBLQ5AAoJEL1wZM0+jj2Z68AIAJ4aVWOcghUtC70mK3thfqFh
LTQ42rEd5nZsZuq2O2I7BQpbEu+tHDwsJ4RD6BLwttnqWKfOaydpv/Sghca7JsU6
z1RPeYjRsV4NF80zlH8WasvdCbuSNaQHdD4eQRiGFVzRfmtsOWb3wfGi8CtR0PEc
Q+Uk49g4GW/O3uFwWPbQlrUDhrYDDQ8TXtAZhE8sEzWW7gSLZ2l8b6kw0v01rtwB
kj90A4esJ06Kd/BDP3SseqXsoBBKMPQTQRlMqJvJ+wvVHTeuIJEP38YF2N3uGUL7
mXJqq7j5bsIwg/fMVkwb+orwpnhHjnQN0/aWqalARMNq64lBNz1qc4RbFEecFwg=
=uuF+
-----END PGP SIGNATURE-----