[syslog-ng]Logging Kernel Messages

Balazs Scheidler bazsi@balabit.hu
Thu, 28 Jun 2001 20:07:41 +0200


On Thu, Jun 28, 2001 at 02:12:00PM -0400, Brian E. Seppanen wrote:
> I'm trying to capture messages that are logged at a specific facility
> (kern) to a specific kernel.log file.
> 
> Below are my definitions
> 
> source kernel_file { file("/proc/kmsg"); };
> destination kernel { file("/var/kernel/kernel.log");};
> filter kern {facility(kern);};
> log { source(kernel_file); filter(kern); destination(kernel);};
> log { source(internal_src); filter(kern); destination(kernel);};
> log { source(stream); filter(kern); destination(kernel);};
> log { source(udp_src); filter(kern); destination(kernel);};
> 
> When I issue the following
> 
> logger -p kern.info "test messages"
> 
> The logs show up in my default message log.  Am I missing something, this
> doesn't seem right...?  I've configured it to take it from four different
> sources just to make sure it was being captured, as I think I only need
> the kernel_file source.

I can't see your default log statement. please make the smallest possible
configuration which shows what you think is incorrect.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1