dhcp3-server logging problem
Hallo everybody, This is my first message to this list. I have a problem with the way syslog-ng 1.5.15 (stock debian woody) is logging the dhcp3-server messages. I have searched in the mailing-list archives and through google but could not find the answer to my problem. Which is: In the conf file for dhcp3-server, one can specify the facility where the log messages should go. The specific lines are: # Use this to send dhcp log messages to a different log file (you also # have to hack syslog.conf to complete the redirection). log-facility local7; So I created some new entries in /etc/syslog-nl/syslog-ng.conf, which are: # dest file where i want the dhcpd stuff: destination dhcpd { file("/var/log/dhcpd.log" owner("root") group("adm") perm(0640)); }; # this is all in one line, obviously. filter f_local7 { facility(local7); }; log { source(src); filter(f_local7); destination(dhcpd); }; So I restarted both services in order to reload their config files, and yes, now I get all the dhcp logging in /var/log/dhcpd.log, *but* I also get it in /var/log/syslog, which is driving me nuts, because I also have logcheck installed and every hour I get all the dhcpd messages in the logcheck emails. Is there a way I have overlooked to prevent this? TIA, N.Asenjo
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I suppose everything is logged to /var/log/syslog? You could make syslog a "fallback" statement: log { source(...); destination(...); flags(catchall, fallback, final); } See for example: http://www.campin.net/syslog-ng/expanded-syslog-ng.conf Greetings, Michael Natxo Asenjo wrote: | Hallo everybody, | | This is my first message to this list. I have a problem with the way | syslog-ng 1.5.15 (stock debian woody) is logging the dhcp3-server | messages. I have searched in the mailing-list archives and through | google but could not find the answer to my problem. Which is: | | In the conf file for dhcp3-server, one can specify the facility where | the log messages should go. The specific lines are: | | # Use this to send dhcp log messages to a different log file (you also | # have to hack syslog.conf to complete the redirection). | log-facility local7; | | So I created some new entries in /etc/syslog-nl/syslog-ng.conf, which | are: | | # dest file where i want the dhcpd stuff: | | destination dhcpd { file("/var/log/dhcpd.log" owner("root") group("adm") | perm(0640)); }; # this is all in one line, obviously. | | filter f_local7 { facility(local7); }; | | log { source(src); filter(f_local7); destination(dhcpd); }; | | So I restarted both services in order to reload their config files, and | yes, now I get all the dhcp logging in /var/log/dhcpd.log, *but* I also | get it in /var/log/syslog, which is driving me nuts, because I also have | logcheck installed and every hour I get all the dhcpd messages in the | logcheck emails. | | Is there a way I have overlooked to prevent this? | | TIA, | | N.Asenjo | | | _______________________________________________ | syslog-ng maillist - syslog-ng@lists.balabit.hu | https://lists.balabit.hu/mailman/listinfo/syslog-ng | Frequently asked questions at http://www.campin.net/syslog-ng/faq.html | - -- Michael Redinger Zentraler Informatikdienst (Computer Centre) Universitaet Innsbruck Technikerstrasse 13 Tel.: ++43 512 507 2335 6020 Innsbruck Fax.: ++43 512 507 2944 Austria Mail: Michael.Redinger@uibk.ac.at BB98 D2FE 0F2C 2658 3780 3CB1 0FD7 A9D9 65C2 C11D http://www.uibk.ac.at/~c102mr/mred-pubkey.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBKaqbD9ep2WXCwR0RAhX/AKD/2O16mpuBf0WDeoQxN3s509BgZACfdRaX 1lJ2wwRy4ADPIxbaQTGaOwU= =asGb -----END PGP SIGNATURE-----
participants (2)
-
Michael Redinger
-
natxete@xs4all.nl