[syslog-ng] - Syslog not logging
kevin_herald
kevin at herald.ca
Tue Oct 4 19:21:22 CEST 2005
Hello,
I've installed syslog-ng-1.9.5 on Solaris 9 and it appears to startup
and be running.
root 430 1 0 14:17:46 ? 0:00 /usr/local/sbin/syslog-ng -f
/etc/syslog-ng/syslog-ng.conf -p /etc/syslog-ng/sy
However, I see no logging in any of the destination files. Is there some
type of debugging switch to help determine why the logs are not being
written to?
Thanks for any help,
Kevin
ps. Here is a copy of my syslog-ng.conf file.
# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on SunOS. But
# it could be configured a lot smarter.
#
# See syslog-ng(8) and syslog-ng.conf(5) for more information.
#
# 20000925 gb at sysfive.com
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};
source s_sys { sun-streams ("/dev/log" door("/etc/.syslog_door"));
internal(); };
source s_remote { udp(ip(0.0.0.0) port(514)); internal(); };
destination syslog {
file("/var/log/syslog");
};
destination messages {
file("/var/adm/messages");
};
destination loghost {
tcp("191.168.230.20" port (5140));
};
destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/adm/messages"); };
destination d_mail { file("/var/log/syslog"); };
destination d_auth { file("/var/log/authlog"); };
destination d_mlop { usertty("operator"); };filter f_filter1 {
level(err) or
(level(notice) and facility (auth, kern)); };
filter f_filter2 { level(err) or
(facility(kern) and level(notice)) or
(facility(daemon) and level(notice)) or
(facility(mail) and level(crit)); };
filter f_filter3 { level(alert) or
(facility(kern) and level(err)) or
(facility(daemon) and level(err)); };
filter f_filter4 { level(alert); };
filter f_filter5 { level(emerg); };
filter f_filter6 { facility(kern) and level(notice); };
filter f_filter7 { facility(mail) and level(debug); };
filter f_filter8 { facility(user) and level(err); };
filter f_filter9 { facility(user) and level(alert); };
log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_mlop); };
log { source(s_sys); filter(f_filter4); destination(d_mlrt); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_auth); };
log { source(s_sys); filter(f_filter7); destination(d_mail); };
log { source(s_sys); filter(f_filter8); destination(d_cons);
destination(d_mesg); };
log { source(s_sys); filter(f_filter9); destination(d_mlop);
destination(d_mlrt); };
destination d_mlrt { usertty("root"); };
destination d_mlal { usertty("*"); };
More information about the syslog-ng
mailing list