Hello I am running a couple of freeradius 2.2.3 servere behind an ACE HLB. The HLB is probing the servers frequently and I want to remove these logins from the log, as the logs is used intensively by supporters to help users with login issues. Is this possible? And if how? Best rgds.
On 21 Jan 2014, at 23:01, René Olskjær Nielsen <ron@adm.ku.dk> wrote:
Hello
I am running a couple of freeradius 2.2.3 servere behind an ACE HLB. The HLB is probing the servers frequently and I want to remove these logins from the log, as the logs is used intensively by supporters to help users with login issues. Is this possible? And if how?
Use linelog to produce your auth log entries, make logging conditional on it not being an ACE probe. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Don't use the basic log. Use 'linelog' module and wrap it with some unlang to make sure your HLB test/probe account doesn't get logged alan
Alan Buxey wrote:
Don't use the basic log. Use 'linelog' module and wrap it with some unlang to make sure your HLB test/probe account doesn't get logged
This kind of answer makes me think we should move the authlog functionality from the server core into the linelog module. Alan DeKok.
FYI After struggeling with linelog, without been able to get something usefull logged, I ended up sending the logs to syslog, and reconfigured rsyslog.conf to filter out the requests. Sometimes the most obvious solution is the last you think of: This line in /etc/ryslog.conf did the trick: if $programname == 'radiusd' and not ($msg contains 'the userid used by the HLB probe') then /var/log/radius/radius.log René -----Oprindelig meddelelse----- Fra: freeradius-users-bounces+ron=adm.ku.dk@lists.freeradius.org [mailto:freeradius-users-bounces+ron=adm.ku.dk@lists.freeradius.org] På vegne af Alan DeKok Sendt: 22. januar 2014 01:01 Til: FreeRadius users mailing list Emne: Re: Removing log entries Alan Buxey wrote:
Don't use the basic log. Use 'linelog' module and wrap it with some unlang to make sure your HLB test/probe account doesn't get logged
This kind of answer makes me think we should move the authlog functionality from the server core into the linelog module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan Buxey
-
Alan DeKok -
Arran Cudbard-Bell -
René Olskjær Nielsen