local4.* but I really would only want to see warnings. Would auth failures show up in local4.warn? On Nov 22, 2017 1:48 PM, "Frank Swasey" <Frank.Swasey(a)uvm.edu&gt; wrote: I send all - but, what gets sent is controlled by the loglevel statement in your config - what have you set yours to? On 11/22/17, 13:36, "openldap-technical on behalf of Douglas Duckworth" < openldap-technical-bounces(a)openldap.org on behalf of dod2014(a)med.cornell.edu&gt; wrote: Hi Thanks to several users on this list I have our cluster up and running. The databases look good as does performance. However, logs are increasing about 1MB every few minutes. Does everyone typically send all of local4 to a file or only filter out for example warning and above? Thanks, Douglas Duckworth, MSc, LFCS HPC System Administrator Scientific Computing Unit Physiology and Biophysics Weill Cornell Medicine E: doug(a)med.cornell.edu O: 212-746-6305 <(212)%20746-6305> F: 212-746-8690 <(212)%20746-8690>