[syslog-ng] Syslog-ng again

Brian Loe knobdy at gmail.com
Mon Aug 7 20:33:44 CEST 2006


I robbed the HP-UX configuration file and have tried it on my AIX box.
If the last line isn't commented out, it logs nothing. With it
commented, netmessages acts as expect but either way no other files are
created, nothing else is logged. Configuration file follows:

/etc/syslog-ng/syslog-ng.conf
options { sync (0);
          time_reopen (10);
          chain_hostnames (no);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
        };

source s_sys { unix-dgram("/dev/log"); internal(); };
source s_udp { udp(ip("0.0.0.0") port(514)); };
source s_udp_s { udp(ip("0.0.0.0") port(601)); };
source s_tcp { tcp(ip("0.0.0.0") port(601)); };

destination d_cons { file("/data/logs/console"); };
destination d_mesg { file("/data/logs/syslog.log"); };
destination d_mail { file("/data/logs/mail.log"); };
destination d_mlrt { usertty("root"); };
destination d_mlal { usertty("*"); };
destination netmessages { file("/data/logs/netmessages.log" perm(0660));
};
destination net_pipe { pipe("/data/pipes/net_pipe" perm(0660)); };

filter f_filter1   { facility(mail) and level(debug); };
filter f_filter2   { (facility(mail) and level(debug)) or
                     level(info); };
filter f_filter3   { level(alert); };
filter f_filter4   { level(emerg); };

log { source(s_sys); filter(f_filter1); destination(d_mail); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_cons);
destination(d_mlrt); };
log { source(s_sys); filter(f_filter4); destination(d_mlal); };
log { source(s_udp); source (s_udp_s); source (s_tcp);
destination(netmessages); };
# log { source(s_udp); source (s_udp_s); source (s_tcp);
destination(net_pipe); };


arg-mailgate1.argushealth.com made the following
annotations---------------------------------------------------------------------PRIVILEGED
AND CONFIDENTIAL
This email transmission contains privileged and confidential information
intended only for the use of the individual or entity named above.
If the reader of the email is not the intended recipient or the employee or
agent responsible for delivering it to the intended recipient, you are
hereby notified that any use, dissemination or copying of this email
transmission is strictly prohibited by the sender. If you have received
this transmission in error, please delete the email and immediately notify
the sender via the email return address or
mailto:postmaster at argushealth.com. Thank you.
---------------------------------------------------------------------


More information about the syslog-ng mailing list