18 May
2000
18 May
'00
12:29 a.m.
ger wrote:
source local { unix-stream("/dev/log"); internal(); }; # no kern.* source net { udp(ip(0.0.0.0) port(514)); }; # kern facility OK
have you tried including "file (/dev/kmsg)" as a source? I have the following on one of my machines, and it logs ipchains output perfectly:
source src { unix-stream("/dev/log"); file("/proc/kmsg"); internal(); };
Works like a charm -- thanks for the suggestion, Ger. This basically bypasses klogd entirely, so I turned it off -- is syslog-ng intended to replace both syslogd and klogd on (Red Hat) Linux systems? Just curious. --Brian