Re: Syslog Configuration Question
On Fri, Jan 31, 2003 at 10:15:25AM -0800, Michael K. Smith wrote: Hello All: I am trying to set up a few facilities to receive syslog info from various network devices. In all cases, not only do the arriving packets get logged to the logfile configured, but they also get logged to /var/log/messages. I would like messages to be used only for system-related issues. I have included the relevant snippets from my syslog.conf file. Could someone please help me figure out what I'm doing wrong? Thanks, Mike *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security auth.info;authpriv.info /var/log/auth.log mail.info /var/log/maillog lpr.info/var/log/lpd-errs cron.* /var/log/cron local5.*/var/log/switches.log local6.*/var/log/pix.log local7.*/var/log/routers.log -- Michael K. Smith NoaNet 206.219.7116 (work) 206.579.8360 (cell) [EMAIL PROTECTED]http://www.noanet.net Two things. 1) Did you remember to restart the syslogd when you changed syslog.conf? Try a `killall -HUP syslogd`. 2) What level are the local(n) facilities logging at? Right now your setup will log anything with a NOTICE level to messages. Nathan -- GPG Public Key ID: 0x4250A04C gpg --keyserver pgp.mit.edu --recv-keys 4250A04C http://63.105.21.156/gpg_nkinkade_4250A04C.asc msg17379/pgp0.pgp Description: PGP signature
RE: Syslog Configuration Question
Add this local5.none; local6.none; local7.none /var/log/messages -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael K. Smith Sent: Friday, January 31, 2003 1:15 PM To: questions list Subject: Syslog Configuration Question Hello All: I am trying to set up a few facilities to receive syslog info from various network devices. In all cases, not only do the arriving packets get logged to the logfile configured, but they also get logged to /var/log/messages. I would like messages to be used only for system-related issues. I have included the relevant snippets from my syslog.conf file. Could someone please help me figure out what I'm doing wrong? Thanks, Mike *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security auth.info;authpriv.info /var/log/auth.log mail.info /var/log/maillog lpr.info/var/log/lpd-errs cron.* /var/log/cron local5.* /var/log/switches.log local6.*/var/log/pix.log local7.*/var/log/routers.log -- Michael K. Smith NoaNet 206.219.7116 (work) 206.579.8360 (cell) [EMAIL PROTECTED] http://www.noanet.net To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
RE: Syslog Configuration Question
Add this local5.none;local6.none;local7.none /var/log/messages No spaces between works -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael K. Smith Sent: Friday, January 31, 2003 1:15 PM To: questions list Subject: Syslog Configuration Question Hello All: I am trying to set up a few facilities to receive syslog info from various network devices. In all cases, not only do the arriving packets get logged to the logfile configured, but they also get logged to /var/log/messages. I would like messages to be used only for system-related issues. I have included the relevant snippets from my syslog.conf file. Could someone please help me figure out what I'm doing wrong? Thanks, Mike *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security auth.info;authpriv.info /var/log/auth.log mail.info /var/log/maillog lpr.info/var/log/lpd-errs cron.* /var/log/cron local5.* /var/log/switches.log local6.*/var/log/pix.log local7.*/var/log/routers.log -- Michael K. Smith NoaNet 206.219.7116 (work) 206.579.8360 (cell) [EMAIL PROTECTED] http://www.noanet.net To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
Re: Syslog Configuration Question
On Friday, January 31, 2003, at 10:35 AM, JoeB wrote: Add this local5.none;local6.none;local7.none /var/log/messages No spaces between works Thanks for the info above. Are there any important system messages that will be caught by this? I wouldn't want to miss something because I had stopped logging to messages for those facilities. Thanks, Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
RE: Syslog Configuration Question
By your question I see you think you are to replace to /var/log/messages line with this one. You are not to remove the original line but add this line following the original line. If I remember correctly this second line is like a continuation. If this does not work then read man syslog.conf for info on continuing a line. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael K. Smith Sent: Friday, January 31, 2003 2:19 PM To: [EMAIL PROTECTED] Cc: questions list Subject: Re: Syslog Configuration Question On Friday, January 31, 2003, at 10:35 AM, JoeB wrote: Add this local5.none;local6.none;local7.none /var/log/messages No spaces between works Thanks for the info above. Are there any important system messages that will be caught by this? I wouldn't want to miss something because I had stopped logging to messages for those facilities. Thanks, Mike To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
