[syslog-ng] - Syslog not logging

kevin_herald kevin at herald.ca
Tue Oct 4 19:21:22 CEST 2005


Hello,

I've installed syslog-ng-1.9.5 on Solaris 9 and it appears to startup 
and be running.

root   430     1  0 14:17:46 ?        0:00 /usr/local/sbin/syslog-ng -f 
/etc/syslog-ng/syslog-ng.conf -p /etc/syslog-ng/sy

However, I see no logging in any of the destination files. Is there some 
type of debugging switch to help determine why the logs are not being 
written to?

Thanks for any help,

Kevin


ps. Here is a copy of my syslog-ng.conf file.


# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on SunOS. But
# it could be configured a lot smarter.
#
# See syslog-ng(8) and syslog-ng.conf(5) for more information.
#
# 20000925 gb at sysfive.com

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
        };


source s_sys { sun-streams ("/dev/log" door("/etc/.syslog_door")); 
internal(); };

source s_remote { udp(ip(0.0.0.0) port(514)); internal(); };

destination syslog {
        file("/var/log/syslog");
};
destination messages {
        file("/var/adm/messages");
};
destination loghost {
        tcp("191.168.230.20" port (5140));
};

destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/adm/messages"); };
destination d_mail { file("/var/log/syslog"); };
destination d_auth { file("/var/log/authlog"); };
destination d_mlop { usertty("operator"); };filter f_filter1   { 
level(err) or
                     (level(notice) and facility (auth, kern)); };
filter f_filter2   { level(err) or
                     (facility(kern) and level(notice)) or
                     (facility(daemon) and level(notice)) or
                     (facility(mail) and level(crit)); };
filter f_filter3   { level(alert) or
                     (facility(kern) and level(err)) or
                     (facility(daemon) and level(err)); };
filter f_filter4   { level(alert); };
filter f_filter5   { level(emerg); };
filter f_filter6   { facility(kern) and level(notice); };
filter f_filter7   { facility(mail) and level(debug); };
filter f_filter8   { facility(user) and level(err); };
filter f_filter9   { facility(user) and level(alert); };

log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_mlop); };
log { source(s_sys); filter(f_filter4); destination(d_mlrt); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_auth); };
log { source(s_sys); filter(f_filter7); destination(d_mail); };
log { source(s_sys); filter(f_filter8); destination(d_cons);
                                        destination(d_mesg); };
log { source(s_sys); filter(f_filter9); destination(d_mlop);
                                        destination(d_mlrt); };

destination d_mlrt { usertty("root"); };
destination d_mlal { usertty("*"); };




More information about the syslog-ng mailing list