I now have:
*.notice;kern.debug;lpr.info;mail.crit;news.err;local4.none /var/log/messages
in /etc/syslog.conf. I HUPed syslogd and the messages are still being written to messages.
KEN
-----Original Message-----
From: Jim King [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 17, 2001 2:18 PM
To: Kanno, Ken; 'David Malone'
Cc: '[EMAIL PROTECTED]'
Subject: Re: syslog config
RE: syslog configYou probably want to add "local4.none" to the
/var/log/messages line; this will prevent local4 messages from being logged
in that file.
Jim
----- Original Message -----
From: Kanno, Ken
To: 'David Malone' ; Kanno, Ken
Cc: '[EMAIL PROTECTED]'
Sent: Tuesday, July 17, 2001 2:12 PM
Subject: RE: syslog config
Where should I add this "!*"?
I tried adding one on a new line before my local4.emerg and killed syslog
and restarted it. Nothing had changed. Everyghing ends up in messages.
-----Original Message-----
From: David Malone [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 17, 2001 2:05 PM
To: Kanno, Ken
Cc: '[EMAIL PROTECTED]'
Subject: Re: syslog config
> !startslip
> *.* /var/log/slip.log
> !ppp
> *.* /var/log/ppp.log
>
> local4.emerg /opt/syslog/pix_msg0
> local4.alert /opt/syslog/pix_msg1
> local4.crit /opt/syslog/pix_msg2
> local4.error /opt/syslog/pix_msg3
> local4.warn /opt/syslog/pix_msg4
> local4.notice /opt/syslog/pix_msg5
> local4.info /opt/syslog/pix_msg6
> local4.debug /opt/syslog/pix_msg7
You have put the new lines after a "!ppp" line, which means that it
will only log if the program name is ppp. Try adding "!*" to indicate
all programs.
David.
