On 12/22/10 2:16 AM, [email protected] wrote:
On Wed, 22 Dec 2010, Mauricio Tavares wrote:
AFAIK, fail2ban is not a facility so something like this
fail2ban.* /var/log/fail2ban/fail2ban.log
should not work. However, it seems that
*.*;auth,authpriv.none;\
fail2ban.none; \
local6.none;local7.none -/var/log/syslog/syslog.log
works. How so?
when you say it 'works', what does it do?
What I wanted to happen is that output from fail2ban should not be
written into the syslog.log file. Instead it would go to its own file.
How I ended up achieving the latter was to say
if ($programname contains 'fail2ban') then /var/log/fail2ban/fail2ban.log
I *want* to say fail2ban is not writing to syslog.log right now, but
since we were not attached since last night I do not know if
*.*;auth,authpriv.none;\
fail2ban.none; \
local6.none;local7.none -/var/log/syslog/syslog.log
is working. From what I read, it shouldn't...
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
