From owner-freebsd-stable Tue Jul 3 1:21:14 2001 Delivered-To: freebsd-stable@freebsd.org Received: from shaft.techsupport.co.uk (shaft.techsupport.co.uk [212.250.77.214]) by hub.freebsd.org (Postfix) with ESMTP id 729BF37B401 for ; Tue, 3 Jul 2001 01:21:11 -0700 (PDT) (envelope-from rasputin@shaft.techsupport.co.uk) Received: from rasputin by shaft.techsupport.co.uk with local (Exim 3.22 #1) id 15HLQ1-0000O5-00; Tue, 03 Jul 2001 09:20:25 +0100 Date: Tue, 3 Jul 2001 09:20:25 +0100 From: Rasputin To: Cy Schubert - ITSD Open Systems Group Cc: stable@freebsd.org Subject: Re: filtering syslog by remote host? Message-ID: <20010703092025.B1431@shaft.techsupport.co.uk> Reply-To: Rasputin References: <20010702155700.A18774@dogma.freebsd-uk.eu.org> <200107021613.f62GDUh06681@cwsys.cwsent.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200107021613.f62GDUh06681@cwsys.cwsent.com>; from Cy.Schubert@uumail.gov.bc.ca on Mon, Jul 02, 2001 at 09:12:39AM -0700 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG * Cy Schubert - ITSD Open Systems Group [010702 17:26]: > In message <20010702155700.A18774@dogma.freebsd-uk.eu.org>, Rasputin > writes: > > > > Hi there - wondered if BSD's native syslog could > > filter events based on the orginating host? > > > > man syslog.conf seems to indicate it can, but I can't get it working. > > > > (Most online resources refer to syslog-ng, but I'm hoping to do it with the b > > ase > > system if possible) > > > > Does anyone have a working config they could post? > > Try sending syslog output to a pipe or a file and have swatch filter > the output for you. We do this at work, filtering out messages to be > sent to our pager/cell phones. Not a bad workaround, we were toying with the idea of using a second syslog instance running on a specific port. Although this complicates things in that: a) I'm unsure you can specify a port on the logging client end, so a port forwarder might be needed. b) newsyslog.conf is going to need hacked ot be sure it restarts both processes files rotate. We'll try specifying the exact hostname, then Andy's patch, and see what happens. Cheers. -- "These are the propulsion systems used by NASA for the moonshots," said Tom apologetically. Rasputin :: Jack of All Trades - Master of Nuns :: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message