On 1/8/03 10:11 pm, "edj" <[EMAIL PROTECTED]> wrote: > On Friday 01 August 2003 02:43 pm, Stroller wrote: >> On 1/8/03 6:11 pm, "edj" <[EMAIL PROTECTED]> wrote: >>> Using syslog-ng. /var/log/messages fills with "syslog-ng[717]: >>> STATS: dropped 0", one after another. OK - so syslog is working. >>> However, an identical log appears in /var/log/syslog. How to keep >>> it from logging to messages? Sorry, but syslog.conf is gibberish >>> to me, and the man page is not very helpful. Any advice >>> appreciated. Thanks. > >> # Syslog-ng default configuration file for Gentoo Linux >> # contributed by Michael Sterrett >> >> options { >> long_hostnames(off); >> sync(0); >> >> # The default action of syslog-ng 1.6.0 is to log a STATS >> line # to the file every 10 minutes. That's pretty ugly after a >> while. # Change it to every 12 hours so you get a nice daily update >> of # how many messages syslog-ng missed (0). >> stats(43200); >> }; > > The generation of STATS lines isn't the problem. It's their > destination. How to keep 'em out of /var/log/messages?
Whups! Sorry! I think something like: destination syslog { file("/var/log/syslog"); }; filter f_sysl-ng { program("syslog-ng"); }; log { source(src); filter(f_sysl-ng); destination(syslog); flags(final); }; Should get it. You'll obviously need to juggle this with your other filters. HTH, Stroller. -- stroller at bigfoot dot com Phone: +(44) 908 513 513 Cellular: +(44) 7740 337 495 Fax/Voicemail: +(44) 870 131 2710 -- [EMAIL PROTECTED] mailing list