Reduce Kernel Messages in rsyslogd

In the standard rsyslog setup of Ubuntu a kernel message goes to 3 log files (syslog, messages and kern.log), i.e. running LOG targets in your firewall setup can really hog your /var/log volume.

I decided to simply discard the kernel messages after logging them to kern.log.

So I placed the following lines on top of the rules in /etc/rsyslog.conf:

kern.*  -/var/log/kern.log
kern.*  ~

If you prefer patch syntax instead, please find it for Ubuntu 9.10 in the following lines:

--- rsyslog.conf.2010-03-21	2010-03-21 13:32:33.569483476 +0100
+++ rsyslog.conf	2010-03-21 13:52:12.741483012 +0100
@@ -52,11 +52,12 @@
 # First some standard log files.  Log by facility.
+kern.*				-/var/log/kern.log
+kern.*				~
 auth,authpriv.*			/var/log/auth.log
 *.*;auth,authpriv.none		-/var/log/syslog
 #cron.*				/var/log/cron.log
 daemon.*			-/var/log/daemon.log
-kern.*				-/var/log/kern.log
 lpr.*				-/var/log/lpr.log
 mail.*				-/var/log/mail.log
 user.*				-/var/log/user.log