Date: Thu, 27 Dec 2007 19:33:58 +0100 From: Peter Boosten <peter@boosten.org> To: Jeffrey Goldberg <jeffrey@goldmark.org> Cc: User questions <freebsd-questions@freebsd.org> Subject: Re: syslog-ng not logging Message-ID: <4773F016.3010409@boosten.org> In-Reply-To: <9F820227-4DB1-474E-B50C-1CE2536CC1FD@goldmark.org> References: <1FF40B1F-D183-421A-A7A6-1BFD8E5EBE15@utdallas.edu> <20071227044016.bqrtqsjpwogkgc8k@www.boosten.org> <98D543FB-8060-4F8F-B4FD-4E5B8ABE876F@goldmark.org> <20071227174049.ku0vp66isksgkk0c@www.boosten.org> <9F820227-4DB1-474E-B50C-1CE2536CC1FD@goldmark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Jeffrey Goldberg wrote: > This is the first I've heard of mtree. I just looked mtree(8), but I > take it that mtree is run periodically somehow to "fix" things. Do > you know where? > > I can always keep my logs in some place other than /var/log if this is > an issue. > IIRC it's done at boot time. Have a look at /etc/rc.d/var >>> Will log rotation preserve daemon ownership? >> >> Never used the *traditional* log style with syslog-ng, I stored >> everything per day/month/year/server. > > I'm doing that for hosts that this is the remote syslod server for. > I'm using > > /var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY-$YEAR$MONTH$DAY" > > for everything coming from the udp source. I suppose I could just add > "localhost" under HOSTS to do a similar destination for everything > else, though there I would probably have FACILITY be the major > categorization > "localhost" will be created automatically by syslog-ng (although it'll probably use the hosts fqdn). >> I ended up running syslog-ng as root, which is probably a bad idea as >> well, so I cannot give you any advice on this one. > > It sounds like using something other than /var/log for a destination > makes the most sense. No, it's enough to grant daemon write permissions in /var/log/HOSTS. Since you're using the $DAY macro, you won't need log rotation anyway. Regards, Peter -- http://www.boosten.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4773F016.3010409>