[syslog-ng] syslog conf (off topic)

[Balazs Scheidler]

Hi,

I would perhaps answer, but honestly I didn't understand the question.
You might elaborate a bit more.

Thanks.

On Wed, 2013-08-14 at 23:54 -0400, Mike Siedelberg wrote:
> Hello, this is a bit off topic but I can't find a good syslog list anymore.  This has to do with the old original syslog, sorry :-).  I like syslog-ng and use it, but we also have AIX hosts to deal with.
> 
> One of our applications programmers supposedly found this remote syslog config on a site on how to comply with basic security.  I can't seem to convince folks here about why this is wrong.  When this config is modeled we do get events.  Please comment on the correctnes of the syslog.conf lines below. As you can see, all the remote lines point to the same syslog collector.  Many thanks.
> 
> If there is a more appropriate list to go to, please advise, thanks.
> 
> auth.info       @arcsl1
> local7.info     @arcsl1
> local6.info     @arcsl1
> auth.*          @arcsl1
> authpriv.*      @arcsl1
> local7.*        @arcsl1
> 
> 
> 
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
> 
>