[syslog-ng] Local7 issue

[Balazs Scheidler]

On Thu, 2011-03-17 at 10:50 +0100, Cardia E. - GDI/BH/O&I wrote:
>  
> 
>  
> 
>  
> 
> Gentlemen,
> 
>  
> 
> I’ve got an issue that the bootlog info doesn’t appear in the bootlog
> file as I would like ( running Red Hat 5.6 EL ).
> 
>  
> 
> Here are the syslog-ng.conf file parameters :
> 
>  
> 
>  
> 
> destination bootlog        { file("/var/remote2_log/$HOST/$YEAR$MONTH
> $DAY/boot.log"); };
> 
>  
> 
>  
> 
> filter      f_local7       { facility(local7); };
> 
>  
> 
>  
> 
> log { source(system);     filter(f_local7);
> destination(bootlog); };
> 

Hmm.. are you sure syslog-ng is started early in the boot process? It
depends primarily how you installed syslog-ng. Is this a package
somewhere? A binary from balabit.com, or?

To be certain, please check that syslog-ng is started as early as
possible, and once you confirmed that, you only need to check if the
filtering you applied here is correct. Are you sure that messages you
are interested in are in facility 'local7' ?


-- 
Bazsi