Return
-
Title
How to disable sudo logging for certain commands? -
Description
There are certain services which run a large number of sudo commands and we do not want our Privilege Manager logs with all of that unnecessary data. Is there a way to disable logging for these commands? -
Resolution
To disable IO logging you can use the NOLOG_INPUT and NOLOG_OUTPUT command tags, for example:ALL = (ALL) NOLOG_INPUT:NOLOG_OUTPUT:/opt/quest/sbin/pmreplayThis will reduce the amount of data used for the logging of these commands by preventing logging of the commands IO, however there will still be event logs showing that the command was run, who it was run by, and if the command was permitted. There is no way from within Privilege Manager to disable these event logs.If disable of all logging for these services is desired than an option could be to install another sudo package on the system and configure this local install to be used by your services exclusively.