Limiting what is logged to syslog

[MMIMadness]

I want to use syslog to get error messages from my switches but the only problem is that i don't want to have the link up/down messages on my access layer switches, to save disk space on the logging server, but i want to see all the rest, config changes, system errors, envromental issues and a like.

i'm currently running a network of about 200 cisco switches on the access layer, mainly cat 3524's and cat 3550's.

On the core layer it's fine to see the messages as if a port goes down it's usually a server or major device.

any help would be great.

thanks,
mmimadness

 

[lgarner]

syslog-ng has great filtering abilities based on facility, priority, host and text of message. You could set up such filters and just discard what you don't want.