[syslog-ng] created dirs problem
Dian HiWi
syslog-ng@lists.balabit.hu
Fri, 28 May 2004 11:44:42 +0200
This is a multi-part message in MIME format.
------=_NextPart_000_0577_01C444A9.2A369B00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi all!
Here is a part from my .conf file:
####################################################################
source udp_mesg { udp( port(514));};
destination d_locals{ =
file("/var/log/test/$HOST/$FACILITY_$LEVEL/$DAY.$MONTH.$YEAR.log" =
owner("root") group("adm") perm (0640) dir_perm(0740) =
create_dirs(yes));};
log { source(udp_mesg);filter(f_messages);destination(d_locals);};
####################################################################
It logs fine, still without facilities, but the problem comes perhaps =
from my devices, not from syslog-ng.
The strange what happend is:
As I listed the directories in my log-directory, I found out, that there =
are about hundred hidden dierectories.
I log from tho devices, and there were, as it should be, two dirs for =
their logs. But in the hidden directories(.00 to .99) there were logs =
from the devices, most from severity 'notice'.
Has anyone idea, what could be the problem?
cheers
Dian
P.S. How can I get=20
-------------------------------------------------------------
Windows 95/NT - 32 bit extensions and a graphical shell=20
for a 16 bit patch=20
to an 8 bit operating system originally coded=20
for a 4 bit microprocessor,=20
written by a 2 bit company=20
that can't stand 1 bit of competition.
------=_NextPart_000_0577_01C444A9.2A369B00
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT face=3DArial size=3D2>Hi all!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Here is a part from my .conf =
file:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial=20
size=3D2>################################################################=
####</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>source udp_mesg { udp( =
port(514));};</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>destination d_locals{=20
file("/var/log/test/$HOST/$FACILITY_$LEVEL/$DAY.$MONTH.$YEAR.log" =
owner("root")=20
group("adm") perm (0640) dir_perm(0740) =
create_dirs(yes));};</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>log {=20
source(udp_mesg);filter(f_messages);destination(d_locals);};</FONT></DIV>=
<DIV><FONT face=3DArial=20
size=3D2>################################################################=
####</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>It logs fine, still without facilities, =
but the=20
problem comes perhaps from my devices, not from syslog-ng.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>The strange what happend =
is:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>As I listed the directories in my =
log-directory, I=20
found out, that there are about hundred hidden =
dierectories.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I log from tho devices, and there were, =
as it=20
should be, two dirs for their logs. But in the hidden directories(.00 to =
.99)=20
there were logs from the devices, most from severity =
'notice'.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Has anyone idea, what could be the=20
problem?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial=20
size=3D2> =20
cheers</FONT></DIV>
<DIV><FONT face=3DArial=20
size=3D2> &nbs=
p; =20
Dian</FONT></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>P.S. How can I get </DIV>
<DIV> </DIV></FONT></DIV>
<DIV><FONT face=3DArial=20
size=3D2> ----------------------------------------------------------=
---<BR> Windows=20
95/NT - 32 bit extensions and a graphical shell <BR> for a =
16 bit=20
patch <BR> to an 8 bit operating =
system=20
originally coded =
<BR> for=20
a 4 bit microprocessor,=20
<BR> &nb=
sp;=20
written by a 2 bit company=20
<BR> &nb=
sp; =20
that can't stand 1 bit of competition.<BR></FONT></DIV></BODY></HTML>
------=_NextPart_000_0577_01C444A9.2A369B00--