[转]messages日志中频繁出现的Session信息过滤方法

Redhat Linux 7的日志文件/var/log/messages中有频繁的“Started Session”,“New session”,"Removed session"等日志出现，如下所示：

如果觉得这些无关紧要的日志影响日常诊断，可以执行以下命令过滤掉这类日志：

echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-" or $msg contains "Starting User Slice of" or $msg contains "Removed session" or $msg contains "Removed slice User Slice of" or $msg contains "Stopping User Slice of") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf

重启rsyslog日志服务：

systemctl restart rsyslog

详情请参考redhat官网链接：
https://access.redhat.com/solutions/1564823