[syslog-ng] Problems with kernel logging

[Brian K. Mohr]

ger wrote:

> > source local { unix-stream("/dev/log"); internal(); }; # no kern.*
> > source net { udp(ip(0.0.0.0) port(514)); }; # kern facility OK
> >
> 
> have you tried including "file (/dev/kmsg)" as a source?  I have the
> following on one of my machines, and it logs ipchains output perfectly:
> 
> source src { unix-stream("/dev/log"); file("/proc/kmsg"); internal(); };

Works like a charm -- thanks for the suggestion, Ger.

This basically bypasses klogd entirely, so I turned it off -- is
syslog-ng intended to replace both syslogd and klogd on (Red Hat) Linux
systems? Just curious.

--Brian