• Log-Zeilen ignorieren: vi /etc/rsyslog.d/01-dstk-ignore.conf

  :msg,contains,"packet truncated" ~
  :msg,contains,"ERROR no room on ep ring" ~
  :msg,contains,"Spurious quick kickout for STA" ~
  :msg,contains,"net_ratelimit: 2 callbacks suppressed" ~
  :msg,contains,"error on subcontainer 'ia_addr' insert" ~
  

• Eigenes Logfile für die local1-Facility (in meinem Fall mein Arduino):

  local1.*        -/var/log/local1.log
  

• local1-Sachen nicht mehr in /var/log/syslog: vi /etc/rsyslog.d/50-default.conf:

  # DSTK was: *.*;auth,authpriv.none              -/var/log/syslog
  *.*;auth,authpriv.none;\
          local1.none             -/var/log/syslog
  

• Gleich noch eine Logrotation: vi /etc/logrotate.d/rsyslog-dstk-local:

  /var/log/local1.log
  {
          rotate 7
          daily
          missingok
          notifempty
          delaycompress
          compress
          postrotate
                  reload rsyslog >/dev/null 2>&1 || true
          endscript
  }
  

• Und dann natürlich

  service rsyslog restart
  

Beispiele hier.