# Logspout: IPsec is rather chatty

**URL:** <https://forums.suse.com/t/logspout-ipsec-is-rather-chatty/5019>\
**Category:** Rancher 1.x\
**Created:** [December 27, 2016, 11:38am UTC](https://forums.suse.com/t/logspout-ipsec-is-rather-chatty/5019 "2016-12-27T11:38:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![davalex](https://avatars.discourse-cdn.com/v4/letter/d/54ee81/32.png) [@davalex](https://forums.suse.com/u/davalex)\
**Post date:** [December 27, 2016, 11:38am UTC](https://forums.suse.com/t/logspout-ipsec-is-rather-chatty/5019/1 "2016-12-27T11:38:12Z")

</div>

Hi,

I’m currently setting up syslogging to our central syslog server using logspout.  
Right now our disks are filling up with logs from the IPSec containers. IPSec seems to be running in debug mode and is rather chatty.

With logspout it should be possible to add a environment variable that says LOGSPOUT=ignore to containers that should be ignored. Is it possible to add this environment variable to the IPSec containers? Or even better, turn the level of logging down a notch?

Best regards,  
Alexander

---

<div class="post-metadata">

**Author:** ![Daniel\_Cassiero](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/daniel_cassiero/32/1986_2.png) [@Daniel\_Cassiero](https://forums.suse.com/u/Daniel_Cassiero)\
**Post date:** [December 28, 2016, 9:47pm UTC](https://forums.suse.com/t/logspout-ipsec-is-rather-chatty/5019/2 "2016-12-28T21:47:51Z")

</div>

I noticed the same in my implementation. I am currently trying to use the routesapi: [https://github.com/gliderlabs/logspout/tree/master/routesapi](https://github.com/gliderlabs/logspout/tree/master/routesapi) to filter out containers…like r-ipsec\* I have been unsuccessful so far.

---

<div class="post-metadata">

**Author:** ![davalex](https://avatars.discourse-cdn.com/v4/letter/d/54ee81/32.png) [@davalex](https://forums.suse.com/u/davalex)\
**Post date:** [December 29, 2016, 3:05pm UTC](https://forums.suse.com/t/logspout-ipsec-is-rather-chatty/5019/3 "2016-12-29T15:05:59Z")

</div>

I started using this image instead [cdrx/logspout:rancher](https://hub.docker.com/r/cdrx/logspout/). This image excludes the system containers among other things. Seems to be working fine for our needs.