Date: Tue, 17 Jul 2001 14:21:40 -0500 From: "Kanno, Ken" <kkanno@rivenet.com> To: 'Jim King' <jim@jimking.net>, "Kanno, Ken" <kkanno@rivenet.com>, 'David Malone' <dwmalone@maths.tcd.ie> Cc: "'stable@freebsd.org'" <stable@FreeBSD.ORG> Subject: RE: syslog config Message-ID: <0C3A66859AEF6E42A1B4AB53307B77AA0AF4D2@ex02.ad.rivenet.com>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
I now have:
*.notice;kern.debug;lpr.info;mail.crit;news.err;local4.none
/var/log/messages
in /etc/syslog.conf. I HUPed syslogd and the messages are still being
written to messages.
KEN
-----Original Message-----
From: Jim King [mailto:jim@jimking.net]
Sent: Tuesday, July 17, 2001 2:18 PM
To: Kanno, Ken; 'David Malone'
Cc: 'stable@freebsd.org'
Subject: Re: syslog config
RE: syslog configYou probably want to add "local4.none" to the
/var/log/messages line; this will prevent local4 messages from being logged
in that file.
Jim
----- Original Message -----
From: Kanno, Ken
To: 'David Malone' ; Kanno, Ken
Cc: 'stable@freebsd.org'
Sent: Tuesday, July 17, 2001 2:12 PM
Subject: RE: syslog config
Where should I add this "!*"?
I tried adding one on a new line before my local4.emerg and killed syslog
and restarted it. Nothing had changed. Everyghing ends up in messages.
-----Original Message-----
From: David Malone [mailto:dwmalone@maths.tcd.ie]
Sent: Tuesday, July 17, 2001 2:05 PM
To: Kanno, Ken
Cc: 'stable@freebsd.org'
Subject: Re: syslog config
> !startslip
> *.* /var/log/slip.log
> !ppp
> *.* /var/log/ppp.log
>
> local4.emerg /opt/syslog/pix_msg0
> local4.alert /opt/syslog/pix_msg1
> local4.crit /opt/syslog/pix_msg2
> local4.error /opt/syslog/pix_msg3
> local4.warn /opt/syslog/pix_msg4
> local4.notice /opt/syslog/pix_msg5
> local4.info /opt/syslog/pix_msg6
> local4.debug /opt/syslog/pix_msg7
You have put the new lines after a "!ppp" line, which means that it
will only log if the program name is ppp. Try adding "!*" to indicate
all programs.
David.
[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: syslog config</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>I now have:</FONT>
</P>
<P><FONT SIZE=2>*.notice;kern.debug;lpr.info;mail.crit;news.err;local4.none /var/log/messages</FONT>
</P>
<P><FONT SIZE=2>in /etc/syslog.conf. I HUPed syslogd and the messages are still being written to messages.</FONT>
</P>
<P><FONT SIZE=2>KEN</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Jim King [<A HREF="mailto:jim@jimking.net">mailto:jim@jimking.net</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, July 17, 2001 2:18 PM</FONT>
<BR><FONT SIZE=2>To: Kanno, Ken; 'David Malone'</FONT>
<BR><FONT SIZE=2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=2>Subject: Re: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=2>RE: syslog configYou probably want to add "local4.none" to the</FONT>
<BR><FONT SIZE=2>/var/log/messages line; this will prevent local4 messages from being logged</FONT>
<BR><FONT SIZE=2>in that file.</FONT>
</P>
<P><FONT SIZE=2>Jim</FONT>
</P>
<BR>
<P><FONT SIZE=2>----- Original Message -----</FONT>
<BR><FONT SIZE=2>From: Kanno, Ken</FONT>
<BR><FONT SIZE=2>To: 'David Malone' ; Kanno, Ken</FONT>
<BR><FONT SIZE=2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, July 17, 2001 2:12 PM</FONT>
<BR><FONT SIZE=2>Subject: RE: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=2>Where should I add this "!*"?</FONT>
<BR><FONT SIZE=2>I tried adding one on a new line before my local4.emerg and killed syslog</FONT>
<BR><FONT SIZE=2>and restarted it. Nothing had changed. Everyghing ends up in messages.</FONT>
<BR><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: David Malone [<A HREF="mailto:dwmalone@maths.tcd.ie">mailto:dwmalone@maths.tcd.ie</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, July 17, 2001 2:05 PM</FONT>
<BR><FONT SIZE=2>To: Kanno, Ken</FONT>
<BR><FONT SIZE=2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=2>Subject: Re: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=2>> !startslip</FONT>
<BR><FONT SIZE=2>> *.* /var/log/slip.log</FONT>
<BR><FONT SIZE=2>> !ppp</FONT>
<BR><FONT SIZE=2>> *.* /var/log/ppp.log</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> local4.emerg /opt/syslog/pix_msg0</FONT>
<BR><FONT SIZE=2>> local4.alert /opt/syslog/pix_msg1</FONT>
<BR><FONT SIZE=2>> local4.crit /opt/syslog/pix_msg2</FONT>
<BR><FONT SIZE=2>> local4.error /opt/syslog/pix_msg3</FONT>
<BR><FONT SIZE=2>> local4.warn /opt/syslog/pix_msg4</FONT>
<BR><FONT SIZE=2>> local4.notice /opt/syslog/pix_msg5</FONT>
<BR><FONT SIZE=2>> local4.info /opt/syslog/pix_msg6</FONT>
<BR><FONT SIZE=2>> local4.debug /opt/syslog/pix_msg7</FONT>
<BR><FONT SIZE=2>You have put the new lines after a "!ppp" line, which means that it</FONT>
<BR><FONT SIZE=2>will only log if the program name is ppp. Try adding "!*" to indicate</FONT>
<BR><FONT SIZE=2>all programs.</FONT>
<BR><FONT SIZE=2> David.</FONT>
</P>
</BODY>
</HTML>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0C3A66859AEF6E42A1B4AB53307B77AA0AF4D2>