Aug 18 08:34:49 ct-squid systemd: Removed slice User Slice of root. Aug 18 09:30:01 ct-squid systemd: Created slice User Slice of root. Aug 18 09:30:01 ct-squid systemd: Started Session c616 of user root. Aug 18 09:41:07 ct-squid systemd: Removed slice User Slice of root. Aug 18 10:30:01 ct-squid systemd: Created slice User Slice of root. Aug 18 10:30:01 ct-squid systemd: Started Session c617 of user root. Aug 18 10:36:28 ct-squid systemd: Removed slice User Slice of root. Aug 18 10:54:22 ct-squid systemd: Created slice User Slice of root. Aug 18 10:54:22 ct-squid systemd: Started Session 33128 of user root. Aug 18 10:54:22 ct-squid systemd-logind: New session 33128 of user root.
echo 'if $programname == "systemd" and ($msg contains "Starting Session" or $msg contains "Started Session" or $msg contains "Created slice" or $msg contains "Starting user-" or $msg contains "Starting User Slice of" or $msg contains "Removed session" or $msg contains "Removed slice User Slice of" or $msg contains "Stopping User Slice of") then stop' >/etc/rsyslog.d/ignore-systemd-session-slice.conf systemctl restart rsyslog