Date: Sat, 3 May 2003 09:32:03 +1000 (EST) From: Andy Farkas <andyf@speednet.com.au> To: Antoine Jacoutot <ajacoutot@lphp.org> Cc: freebsd-questions@freebsd.org Subject: Re: syslogd facility Message-ID: <20030503092403.C67119-100000@hewey.af.speednet.com.au> In-Reply-To: <200305021405.02663.ajacoutot@lphp.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 2 May 2003, Antoine Jacoutot wrote:
> I am trying to log the accesses to my webmail system.
> It works nice except that I get logs twice: ionce in /var/log/horde.log, which
> is OK and one in /var/log/messages which I don't want.
>
> My syslog.conf contains this lines:
>
> *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
> [...]
> !HORDE
> *.* /var/log/horde.log
>
> So I though I wouls tweak the line concerning /var/log/messages, which I did:
> *.notice;kern.debug;lpr.info;mail.crit;news.err;HORDE.none /var/log/messages
>
> >From now, it does not log to /var/log/messages anymore, but when I kill -HUP
> syslogd, I get this message:
> syslogd: unknown facility name "HORDE"
>
> ... well, indeed, syslogd is right.
>
> So does anyone know how I could do what I want ?
> Meaning logging accesses to my webmail --> /var/log/horde.log only
>
> Thanks in advance?
>
> Antoine
I can suggest two things. 1/ run syslogd with -vv flags. This will show
what level/facility messages have. 2/ log everything to /var/log/all.log
by uncommenting the line in /etc/syslog.conf. Now you can tail -f and
watch what gets logged.
Also, read "man syslog.conf" very carefully.
Hope that helps.
--
:{ andyf@speednet.com.au
Andy Farkas
System Administrator
Speednet Communications
http://www.speednet.com.au/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030503092403.C67119-100000>