[syslog-ng] syslog-ng not writing logs to /var/log/messages
Shashank Vinchurkar
shashank at rohati.com
Mon Oct 29 19:45:54 CET 2007
Hi,
I am unable to get the syslog-ng to write messages to the
/var/log/messages file. Syslog-ng receives the messages but doesn't seem
to write it to the /var/log/message file. Here is the log from the
syslog-ng:
/syslog-ng # /syslog-ng/sbin/syslog-ng -e -v -d -F -f
/syslog-ng/syslog-ng.conf -C /
syslog-ng starting up; version='2.0.5'
Syslog connection accepted; from='AF_UNIX(anonymous)',
to='AF_UNIX(/dev/log)'
Incoming log entry; line='<83>Mar 3 18:54:10 login:
pam_rohati_auth(login:auth): user name not valid'
Filter rule evaluation begins; filter_rule='f_filter2'
Filter node evaluation result; filter_result='match',
filter_type='level'
Filter rule evaluation result; filter_result='match',
filter_rule='f_filter2'
Initializing destination file writer; template='/var/log/messages',
filename='/var/log/messages'
Incoming log entry; line='<85>Mar 3 18:54:10 login: FAILED LOGIN
SESSION FROM (null) FOR , System error'
Filter rule evaluation begins; filter_rule='f_filter2'
Filter node evaluation result; filter_result='match',
filter_type='level'
Filter rule evaluation result; filter_result='match',
filter_rule='f_filter2'
EOF occurred while reading; fd='6'
Closing log reader fd; fd='6'
Here is the syslog-ng configuration file:
options {
sync (2);
time_reopen (10);
log_fifo_size (10);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (yes);
keep_hostname (yes);
};
source s_sys {
unix-stream ("/dev/log");
# internal();
};
destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/log/messages"); };
filter f_filter2 { level(info..emerg); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); destination(d_mesg); flags(fallback);};
Thanks in advance for help.
-Shashank
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20071029/4b9accf0/attachment.htm
More information about the syslog-ng
mailing list