[syslog-ng]Logging Kernel Messages

[Brian E. Seppanen]

I'm trying to capture messages that are logged at a specific facility
(kern) to a specific kernel.log file.

Below are my definitions

source kernel_file { file("/proc/kmsg"); };
destination kernel { file("/var/kernel/kernel.log");};
filter kern {facility(kern);};
log { source(kernel_file); filter(kern); destination(kernel);};
log { source(internal_src); filter(kern); destination(kernel);};
log { source(stream); filter(kern); destination(kernel);};
log { source(udp_src); filter(kern); destination(kernel);};

When I issue the following

logger -p kern.info "test messages"

The logs show up in my default message log.  Am I missing something, this
doesn't seem right...?  I've configured it to take it from four different
sources just to make sure it was being captured, as I think I only need
the kernel_file source.

This is on a redhat linux 7.0 pc.

Thanks,


Brian Seppanen
seppy@chartermi.net
906-228-4226 ext 23