On Thu, 2011-03-17 at 10:50 +0100, Cardia E. - GDI/BH/O&I wrote:
Gentlemen,
I’ve got an issue that the bootlog info doesn’t appear in the bootlog file as I would like ( running Red Hat 5.6 EL ).
Here are the syslog-ng.conf file parameters :
destination bootlog { file("/var/remote2_log/$HOST/$YEAR$MONTH $DAY/boot.log"); };
filter f_local7 { facility(local7); };
log { source(system); filter(f_local7); destination(bootlog); };
Hmm.. are you sure syslog-ng is started early in the boot process? It depends primarily how you installed syslog-ng. Is this a package somewhere? A binary from balabit.com, or? To be certain, please check that syslog-ng is started as early as possible, and once you confirmed that, you only need to check if the filtering you applied here is correct. Are you sure that messages you are interested in are in facility 'local7' ? -- Bazsi