Computer/linux

too much log information in ufw

citadel 2022. 4. 13. 02:40
Open /etc/rsyslog.d/20-ufw.conf

change it according to the following


# Log kernel generated UFW log messages to file  
:msg,contains,"\[UFW " -/var/log/ufw.log  

# Uncomment the following to stop logging anything that matches the last rule.  
# Doing this will stop logging kernel generated UFW log messages to the file  
# normally containing kern.\* messages (eg, /var/log/kern.log)  
& stop

"-" in front of /var/log/ufw.log
Uncomment "& stop

systemctl restart rsyslog