On Thu, Jun 28, 2001 at 02:12:00PM -0400, Brian E. Seppanen wrote:
I'm trying to capture messages that are logged at a specific facility (kern) to a specific kernel.log file.
Below are my definitions
source kernel_file { file("/proc/kmsg"); }; destination kernel { file("/var/kernel/kernel.log");}; filter kern {facility(kern);}; log { source(kernel_file); filter(kern); destination(kernel);}; log { source(internal_src); filter(kern); destination(kernel);}; log { source(stream); filter(kern); destination(kernel);}; log { source(udp_src); filter(kern); destination(kernel);};
When I issue the following
logger -p kern.info "test messages"
The logs show up in my default message log. Am I missing something, this doesn't seem right...? I've configured it to take it from four different sources just to make sure it was being captured, as I think I only need the kernel_file source.
I can't see your default log statement. please make the smallest possible configuration which shows what you think is incorrect. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1