centos/redhat 7日志设置/var/log/message报大量Started Session 16221 of user root.

解决办法：

echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-" or $msg contains "Starting User Slice of" or $msg contains "Removed session" or $msg contains "Removed slice User Slice of" or $msg contains "Stopping User Slice of") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf

重新启动rsyslog服务

systemctl restart rsyslog

本文转自 南非波波 51CTO博客，原文链接：http://blog.51cto.com/nanfeibobo/2069007，如需转载请自行联系原作者