[syslog-ng]Anyone got a good Solaris 8 client config to spare?

[Victor]

----- Original Message -----
From: "Tighe Schlottog" <TSchlottog@PeabodyEnergy.com>
To: <syslog-ng@lists.balabit.hu>
Sent: Friday, April 26, 2002 2:59 PM
Subject: [syslog-ng]Anyone got a good Solaris 8 client config to spare?


>
> If so, thanks in advance.
>
> Tighe Schlottog

Here is the config that I used on one of the sun boxes that seems to work
fine. Logs a bunch of things to the central server. Local5 is something I
used for myself, so you might not need it (You can safely remove that if you
don't need it).

HTH
Victor


#
# Syslog-ng example configuration file for Solaris
#
# Copyright (c) 1999 Balazs Scheidler
# $Id: syslog-ng.conf.solaris,v 1.2 1999/11/15 12:30:41 bazsi Exp $
#
# Solaris 2.5.1 and below uses the STREAMS driver, above extends it
# with doors. For 2.5.1 remove the door() option from the source
declaration.
#

source local { sun-streams("/dev/log" door("/etc/.syslog_door"));
internal(); };

filter f_auth      { facility(auth); };
filter f_cron      { facility(cron); };
filter f_daemon    { facility(daemon) and
level(info,warn,notice,err,crit,alert,emerg); };
filter f_kern      { facility(kern); };
filter f_mail      { facility(mail); };
filter f_messages  { level(info..warn) and not facility(auth, mail, news,
local5); };
filter f_www       { facility(local5); };

filter f_debug     { not facility(auth, news, mail, local5); };
filter f_emergency { level(emerg); };
filter f_info      { level(info); };
filter f_notice    { level(notice); };
filter f_warn      { level(warn); };
filter f_crit      { level(crit); };
filter f_err       { level(err); };

destination authlog   { file("/var/log/auth.log"   sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination cronlog   { file("/var/log/cron.log"   sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination daemonlog { file("/var/log/daemon.log" sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination kernlog   { file("/var/log/kern.log"   sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination mailinfo  { file("/var/log/mail.info"  sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination mailwarn  { file("/var/log/mail.warn"  sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination mailerr   { file("/var/log/mail.err"   sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination messages  { file("/var/log/messages"   sync(0) log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination wwwacclog { file("/var/log/www.access.log"  sync(0)
log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination wwwerrlog { file("/var/log/www.errors.log"  sync(0)
log_fifo_size(10)
                        create_dirs(yes) owner(root) group(system)
perm(0660) dir_perm(0770)); };
destination loghost   { tcp("XXX.XXX.XXX.XXX" port(514)); };

############################################################################
#
# Actual Logs
#    This brings all of the above together to make a log. A log needs:
#    1. source
#    2. filters (if any)
#    3. destination
############################################################################
#
log { source(local); destination(loghost); };
log { source(local); filter(f_auth); destination(authlog); };
log { source(local); filter(f_cron); destination(cronlog); };
log { source(local); filter(f_daemon); destination(daemonlog); };
log { source(local); filter(f_kern); destination(kernlog); };
# log { source(local); filter(f_mail); filter(f_info);
destination(mailinfo); };
# log { source(local); filter(f_mail); filter(f_warn);
destination(mailwarn); };
# log { source(local); filter(f_mail); filter(f_err);
destination(mailerr); };
# log { source(local); filter(f_messages); destination(messages);};
# log { source(local); filter(f_www); filter(f_info);
destination(loghost);};
# log { source(local); filter(f_www); filter(f_err); destination(loghost);};