[syslog-ng]Is my default location broken?
Balazs Scheidler
syslog-ng@lists.balabit.hu
Thu, 19 Feb 2004 08:12:00 +0100
2004-02-18, sze keltezéssel 19:40-kor Madziarczyk, Jonathan ezt írta:
> I just migrated to a new box for syslog-ng and I'm trying to get the
> "default" location to work for messages that don't meet any of my rules
> yet.
>
> I've sent multiple syslog messages to the box but they don't seem to be
> showing up. Any ideas? I do know that the "rules" messages are working
> so udp is binding.
>
> Thanks,
> JonM
>
> options { dir_perm(0755); perm(0644); chain_hostnames(no);
> time_reopen (10);
> log_fifo_size (1000);
> long_hostnames (off);
> use_dns (yes);
> use_fqdn (no);
> dns_cache (yes);
> create_dirs (yes);
> keep_hostname(yes); };
>
> source local { unix-dgram("/dev/log"); internal(); };
>
> source s_udpmessages { udp(ip(0.0.0.0) port(514)); };
>
> destination unsorted { file("/logs/unsorted.log" perm(0777)); };
> log { source(s_udpmessages); destination(unsorted); flags(final,
> fallback); };
what are those 'rules' messages you are referring to? try stracing the
syslog-ng process to see whether it actually receives messages.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1