Unraveling the Mystery

First things first, let’s address the perplexing default setting in syslog (particularly under Debian’s rsyslogd) that makes Postfix entries flood both mail.log and syslog. It’s a head-scratcher, but fear not – we’re here to set things right.

To bring order to the chaos, follow these easy steps:

1. Open either /etc/syslog.conf or /etc/rsyslog.conf, depending on your system configuration.
2. Look for the following line:

   *.*;auth,authpriv.none -/var/log/syslog

3. Modify it to:

   *.*;auth,authpriv.none;mail.none -/var/log/syslog

4. Save the changes and, voila, you’re almost done!

Quick Restart

To ensure that your changes take effect promptly, restart syslog with a swift command.

sudo systemctl restart rsyslog

Enjoy the Simplicity

And there you have it – no more redundant Postfix logs cluttering up syslog. Now, your mail-related entries will neatly reside in mail.log, making it easier for you to monitor and troubleshoot without the unnecessary noise.

Streamlining your logs has never been this simple. Happy logging!

Wo ich hier schon mal fetchmail aus dem syslog verbannt habe,
ist jetzt postfix dran.

Ich verstehe sowieso nicht warum syslog
(unter meinem Debian  rsyslogd) so eingestellt ist,
das postfixfoo sowohl in mail.log als auch in syslog geschrieben werden.

Also nichts wie das korrigieren:

Dazu einfach in /etc/syslog.conf bzw. /etc/rsyslog.conf folgende Zeile suchen:

*.*;auth,authpriv.none                        -/var/log/syslog

und ändern in

*.*;auth,authpriv.none;mail.none        -/var/log/syslog

voila noch schnell syslog neustarten und fertig :)