It is very probable that each LPIC-1 102 exam contains a twisted question about the neglected syslog.
Here are some configuration options taken from 'man syslog' to get us pass through:
mail.*;mail.!=info /var/log/mail - this means that all messages from the mail facility with any priority but 'info' will be logged in the file /var/log/mail
news.info;news.!crit /var/log/news - all messages from news.info (including) to news.crit (excluding) would be logged to the /var/log/news file.
mail.!debug - putting only this on a line means to skipp all mail messages but the ones for debugging
*.* @example.org - this means to redirect all messages to example.org
kern.=debug |/usr/adm/debug - route only kernel debugging messages to the debug pipe