On 07/12/2010 03:40 PM, Bryan O'Neal wrote: > # Log anything (except mail) of level info or higher. > # Don't log private authentication messages! > *.info;mail.none;authpriv.none;cron.none /var/log/messages *.info is going to catch a lot of stuff. I don't have a redhat server handy to check, but if it doesn't have advanced filtering capabilities, you might need to replace *.info and break it into its individual facilities - minus your local0-local7. auth.info, cron.info, ... , etc - see the man page for the full list.