Re: Quieting SSHd messages to the console

> I want to get a message on the console when a user su's (auth.notice). 
> That seems pretty critical.
> 
> I do not want to get logs on the console for every other ssh session that 
> fails to complete because the internet is full of bots.
> 
> Sep 18 08:42:31 <auth.err> prime sshd[3098]: error: 
> Fssh_kex_exchange_identification: Connection closed by remote host
> 
> Sep 18 08:38:24 <auth.err> prime sshd[2531]: error: PAM: Authentication 
> error for illegal user test from 78.38.71.249
> 
> What goes to the console in /etc/syslog.conf is:
> 
> *.err;kern.warning;auth.notice;mail.crit                /dev/console
> 
> Is there a way to say "everything else.err, but not auth.err"?

May be not exactly what you want, but I use
LogLevel QUIET
in /etc/ssh/sshd_config
(sshd invoked from inetd).