What's new

acsd log message priority

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

OCDDan

New Around Here
Running 384.13 on an RT-AC3200.

The acsd log messages appear to have been assigned a priority of Critical (or Alert?). Seems like Info or Notice would be more appropriate.

I know that I can stop seeing these messages by not using auto channel settings.

I'm sending the syslog to a remote server, which happens to be an AlienVault OSSIM server. In addition to collecting the received log messages, if a message has a priority of Critical (or higher), it also automatically gets written to stdout on the server console, as well as all ssh terminal sessions logged in to the server.

Setting the "Log only messages more urgent than" field in the router GUI, to the highest level of Alert, doesn't prevent the messages from being logged.
 
acsd is closed source, and outside of my control.
 
Thanks for letting me know.
I'll see if I can filter the messages using a rsyslog.d conf file on the OSSIM server.
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top