Date: Thu, 26 Feb 2009 16:39:17 +0100 (CET) From: "Joost Bekkers" <joost@jodocus.org> To: "Paul Halliday" <paul.halliday@gmail.com> Cc: questions@freebsd.org Subject: Re: Can stock syslog do hostA -> fileA? Message-ID: <52000.62.12.14.28.1235662757.squirrel@jodocus.org>
next in thread | raw e-mail | index | archive | help
On Thu, February 26, 2009 15:19, Paul Halliday wrote: > I am collecting syslogs from a PIX and a couple of Barracudas. It would be a lot easier for each to have their own logfile. I have been poking around a bit; I saw this one: > > +host1 /var/log/host1 > > but it doesn't appear to work. Is it being trumped by something else in the config file? Is the syntax wrong? I think you're looking for something like this: !* # reset any previous program selector. Optional +host1 *.* /var/log/host1 +* # reset the host selector. Optional Also keep in mind the default flags for syslogd include a -s which prevents syslogd from logging messages from remote machines. Joost.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52000.62.12.14.28.1235662757.squirrel>