Gentlemen, I've got an issue that the bootlog info doesn't appear in the bootlog file as I would like ( running Red Hat 5.6 EL ). Here are the syslog-ng.conf file parameters : destination bootlog { file("/var/remote2_log/$HOST/$YEAR$MONTH$DAY/boot.log"); }; filter f_local7 { facility(local7); }; log { source(system); filter(f_local7); destination(bootlog); }; Someone an idea ?? Greetz, Efisio --------------------------------------------------------------------------------- Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. Ministerie van Veiligheid en Justitie This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. Ministry of Security and Justice ---------------------------------------------------------------------------------
On Thu, 2011-03-17 at 10:50 +0100, Cardia E. - GDI/BH/O&I wrote:
Gentlemen,
I’ve got an issue that the bootlog info doesn’t appear in the bootlog file as I would like ( running Red Hat 5.6 EL ).
Here are the syslog-ng.conf file parameters :
destination bootlog { file("/var/remote2_log/$HOST/$YEAR$MONTH $DAY/boot.log"); };
filter f_local7 { facility(local7); };
log { source(system); filter(f_local7); destination(bootlog); };
Hmm.. are you sure syslog-ng is started early in the boot process? It depends primarily how you installed syslog-ng. Is this a package somewhere? A binary from balabit.com, or? To be certain, please check that syslog-ng is started as early as possible, and once you confirmed that, you only need to check if the filtering you applied here is correct. Are you sure that messages you are interested in are in facility 'local7' ? -- Bazsi
participants (2)
-
Balazs Scheidler
-
Cardia E. - GDI/BH/O&I