I have a bunch of lines like this in /etc/rsyslog.d/systemd-drivel.conf:
:msg, contains, "Activating via systemd" ~ :msg, contains, "Activation via systemd failed" ~
Every time I boot, rsyslogd complains about the deprecated syntax:
Aug 9 18:39:21 zooty rsyslogd-2307: warning: ~ action is deprecated, consider using the 'stop' statement instead [v8.8.0 try http://www.rsyslog.com/e/2307 ]
Yet no google-fu seems to be powerful enough to find an example of "using the 'stop' statement"
Can anyone tell me *exactly* what to put in a file in /etc/rsyslog.d to use this mythical, yet uttery, utterly, undocumented "stop" statement?
Absolutely none of the links from the URL in the message have any descriptions of how to use the new and improved syntax.
The man page for rsyslogd still documents the deprecated stuff and doesn't say anything at all about any new syntax.
This appears to be a classic example of open source project obfuscation by "improvement" :-)