Skip site navigation (1)Skip section navigation (2) 
Date:      Tue, 17 Jul 2001 14:12:28 -0500
From:      "Kanno, Ken" <kkanno@rivenet.com>
To:        'David Malone' <dwmalone@maths.tcd.ie>, "Kanno, Ken" <kkanno@rivenet.com>
Cc:        "'stable@freebsd.org'" <stable@freebsd.org>
Subject:   RE: syslog config
Message-ID:  <0C3A66859AEF6E42A1B4AB53307B77AA0AF4D1@ex02.ad.rivenet.com>
next in thread | raw e-mail | index | archive | help 

[-- Attachment #1 --]
Where should I add this "!*"?

I tried adding  one on a new line before my local4.emerg and killed syslog
and restarted it. Nothing had changed. Everyghing ends up in messages.

-----Original Message-----
From: David Malone [mailto:dwmalone@maths.tcd.ie]
Sent: Tuesday, July 17, 2001 2:05 PM
To: Kanno, Ken
Cc: 'stable@freebsd.org'
Subject: Re: syslog config


> !startslip
> *.*                                             /var/log/slip.log
> !ppp
> *.*                                             /var/log/ppp.log
> 
> local4.emerg                                   /opt/syslog/pix_msg0
> local4.alert                                   /opt/syslog/pix_msg1
> local4.crit                                    /opt/syslog/pix_msg2
> local4.error                                   /opt/syslog/pix_msg3
> local4.warn                                    /opt/syslog/pix_msg4
> local4.notice                                  /opt/syslog/pix_msg5
> local4.info                                    /opt/syslog/pix_msg6
> local4.debug                                   /opt/syslog/pix_msg7

You have put the new lines after a "!ppp" line, which means that it
will only log if the program name is ppp. Try adding "!*" to indicate
all programs.

	David.

[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: syslog config</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=2>Where should I add this &quot;!*&quot;?</FONT>
</P>

<P><FONT SIZE=2>I tried adding&nbsp; one on a new line before my local4.emerg and killed syslog and restarted it. Nothing had changed. Everyghing ends up in messages.</FONT></P>

<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: David Malone [<A HREF="mailto:dwmalone@maths.tcd.ie">mailto:dwmalone@maths.tcd.ie</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, July 17, 2001 2:05 PM</FONT>
<BR><FONT SIZE=2>To: Kanno, Ken</FONT>
<BR><FONT SIZE=2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=2>Subject: Re: syslog config</FONT>
</P>
<BR>

<P><FONT SIZE=2>&gt; !startslip</FONT>
<BR><FONT SIZE=2>&gt; *.*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/log/slip.log</FONT>
<BR><FONT SIZE=2>&gt; !ppp</FONT>
<BR><FONT SIZE=2>&gt; *.*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/log/ppp.log</FONT>
<BR><FONT SIZE=2>&gt; </FONT>
<BR><FONT SIZE=2>&gt; local4.emerg&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg0</FONT>
<BR><FONT SIZE=2>&gt; local4.alert&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg1</FONT>
<BR><FONT SIZE=2>&gt; local4.crit&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg2</FONT>
<BR><FONT SIZE=2>&gt; local4.error&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg3</FONT>
<BR><FONT SIZE=2>&gt; local4.warn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg4</FONT>
<BR><FONT SIZE=2>&gt; local4.notice&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg5</FONT>
<BR><FONT SIZE=2>&gt; local4.info&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg6</FONT>
<BR><FONT SIZE=2>&gt; local4.debug&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /opt/syslog/pix_msg7</FONT>
</P>

<P><FONT SIZE=2>You have put the new lines after a &quot;!ppp&quot; line, which means that it</FONT>
<BR><FONT SIZE=2>will only log if the program name is ppp. Try adding &quot;!*&quot; to indicate</FONT>
<BR><FONT SIZE=2>all programs.</FONT>
</P>

<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=2>David.</FONT>
</P>

</BODY>
</HTML>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0C3A66859AEF6E42A1B4AB53307B77AA0AF4D1>