If you see too many of these lines:
root@s1 trungson]# tail /var/log/messages Oct 16 12:36:01 s1 crond(pam_unix)[21821]: session closed for user root
Here is how to redirect it to a more appropriate place
[root@s1 trungson]# more /etc/syslog.conf ... *.info;mail.none;authpriv.none;cron.none;auth.!=info /var/log/messages ... # Log cron stuff, add auth.info to redirect cron logging cron.*;auth.info /var/log/cron
Leave a Reply