It is very probable that each LPIC-1 102 exam contains a twisted question about the neglected syslog.

Here are some configuration options taken from 'man syslog' to get us pass through:

mail.*;mail.!=info       /var/log/mail - this means that all messages from the mail facility with any priority but 'info' will be logged in the file /var/log/mail

news.info;news.!crit     /var/log/news - all messages from news.info (including) to  news.crit  (excluding)  would be logged to the /var/log/news file.

mail.!debug - putting only this on a line means to skipp all mail messages but the ones for debugging

*.*            @example.org - this means to redirect all messages to example.org

kern.=debug              |/usr/adm/debug - route only kernel debugging messages to the debug pipe