/etc/rsyslog.d
NameSizeModeActions
20-ufw.conf3140644editdlrm
21-cloudinit.conf2550644editdlrm
50-default.conf11240644editdlrm
postfix.conf2420644editdlrm
Edit: /etc/rsyslog.d/20-ufw.conf (314B)
# Log kernel generated UFW log messages to file :msg,contains,"[UFW " /var/log/ufw.log # Uncomment the following to stop logging anything that matches the last rule. # Doing this will stop logging kernel generated UFW log messages to the file # normally containing kern.* messages (eg, /var/log/kern.log) #& stop