Syslog. Logovani facility local1.

Ahoj, snazim se rozchodit logovani ze vzdaleneho syslog serveru na lokalnim linuxovem syslog serveru. Vzdálený server zasila logy jako facility local1 (tedy aspon by mel, jedna se o netasq firewall).

Na lokalnim syslog serveru se mi zpravy loguji v poradku do /vyr/log/messages.

Chtel bych aby se mi logovaly do vlastniho souboru a tak sem upravil konfiguracni soubor syslogu:


# Log anything (except mail and authentication) of level info or higher.
*.info;mail.none;authpriv.none;auth.none;local5.none;local6.none;local4.none;local2.none;cron.none      /v
ar/log/messages

# The authpriv file has restricted access.
authpriv.*                                      /var/log/secure

# Auth logging
#auth.=debug                                    -/var/log/auth/debug
auth.=info                                      -/var/log/auth/info
auth.=notice                                    -/var/log/auth/notice
auth.=warn                                      -/var/log/auth/warnings
auth.err                                        /var/log/auth/errors

# Kernel logging
#kern.=debug                                    -/var/log/kernel/debug
kern.=info                                      -/var/log/kernel/info
kern.=notice                                    -/var/log/kernel/notice
kern.=warn                                      -/var/log/kernel/warnings
kern.err                                        /var/log/kernel/errors

# Cron logging to separate files.
#cron.=debug                                    -/var/log/cron/debug
cron.=info                                      -/var/log/cron/info
cron.=notice                                    -/var/log/cron/notice
cron.=warn                                      -/var/log/cron/warnings
cron.err                                        /var/log/cron/errors

# Mail logging to separate files.
# Note that we disable syncronous writes to it as it tends to hog
# too much resources.
#mail.=debug                                    -/var/log/mail/debug
mail.=info                                      -/var/log/mail/info
mail.=notice                                    -/var/log/mail/notice
mail.=warn                                      -/var/log/mail/warnings
mail.err                                        /var/log/mail/errors
# Bind logs:
#local2.=debug                                  -/var/log/named/debug
local2.=info                                    -/var/log/named/info
local2.=notice                                  -/var/log/named/notice
local2.=warn                                    -/var/log/named/warnings
local2.err                                      /var/log/named/errors

# OpenLDAP logging:
#local4.=debug                                  -/var/log/openldap/debug
local4.=info                                    -/var/log/openldap/info
local4.=notice                                  -/var/log/openldap/notice
local4.=warn                                    -/var/log/openldap/warnings
local4.err                                      /var/log/openldap/errors

# swup logging:
#local5.=debug                                  -/var/log/swup/debug
local5.=info                                    -/var/log/swup/info
local5.=notice                                  -/var/log/swup/notice
local5.=warn                                    -/var/log/swup/warnings
local5.err                                      /var/log/swup/errors

# cyrus-imapd logging to separate files.
#local6.=debug                                  -/var/log/imapd/debug
local6.=info                                    -/var/log/imapd/info
local6.=notice                                  -/var/log/imapd/notice
local6.=warn                                    -/var/log/imapd/warnings
local6.err                                      /var/log/imapd/errors

# Daemons logging to separate files.
#daemon.=debug                                  -/var/log/daemon/debug
daemon.=info                                    -/var/log/daemon/info
daemon.=notice                                  -/var/log/daemon/notice
daemon.=warn                                    -/var/log/daemon/warnings
daemon.err                                      /var/log/daemon/errors

# Everybody gets emergency messages
*.emerg                                                 *

# Save mail and news errors of level err and higher in a
# special file.
uucp,news.crit                                  /var/log/spooler

# Save boot messages also to boot.log
local7.*                                        /var/log/boot.log

local1.*                                        /var/log/netasq.log

# Log to remote machine
#*.*                                            @loghost

Zkousel jsem i sniffovat pakety, ale nepodarilo se mi zjistit jakou facilitu zasilane logy maji.

Jak bych mel upravit nastaveni, aby byly logy uladany do samostaneho souboru.

Dotaz: Syslog. Logovani facility local1.

Odpovědi