Re: [CentOS] rsyslog.conf

2015-07-29 Thread Chuck Campbell
On 7/23/2015 12:15 PM, m.r...@5-cent.us wrote: Leon Fauster wrote: Am 23.07.2015 um 18:06 schrieb Valeri Galtsev galt...@kicp.uchicago.edu: On Thu, July 23, 2015 10:45 am, Johnny Hughes wrote: The main reason actually is chronological order. But not just for the reply .. but for IN-LINE

Re: [CentOS] rsyslog.conf

2015-07-25 Thread Jonathan Billings
On Jul 24, 2015, at 2:30 PM, m.r...@5-cent.us wrote: Ok, this is frustrating. May I take it, then, that no one has written the conditional filters described in the rsyslog manual? We’ve had this in our RHEL6 and now our RHEL7 rsyslog.conf: # Ignore OpenAFS errors :msg, contains, byte-range

Re: [CentOS] rsyslog.conf

2015-07-25 Thread Stuart Barkley
On Fri, 24 Jul 2015 at 20:37 -, Always Learning wrote: There is absolutely no need to include irrelevant text when replying to a posting. Trim and Cut were sensible skills acquired by some of us in the 1980's and 1990's. Every email sent to this list includes the following in the headers:

Re: [CentOS] rsyslog.conf

2015-07-24 Thread James B. Byrne
On Thu, July 23, 2015 10:34, Valeri Galtsev wrote: Well, my habit for regular e-mail exchange is top posting thus the person reads my message thus is right to the point why this particular message message was sent in a first place... But when mail lists are concerned, I do an opposite, that

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Robert Wolfe
If selinux is causing you a headache, then disable it. -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of James B. Byrne Sent: Friday, July 24, 2015 8:16 AM To: CentOS mailing list Subject: Re: [CentOS] rsyslog.conf On Thu, July 23, 2015

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Valeri Galtsev
On Fri, July 24, 2015 8:16 am, James B. Byrne wrote: On Thu, July 23, 2015 13:19, m.r...@5-cent.us wrote: Physically dragging the thread back on topic... I really am going crazy, trying to deal with the hourly logs from the loghost. We've got 170+ servers and workstations... but a *very*

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Jonathan Billings
On Fri, Jul 24, 2015 at 09:16:26AM -0400, James B. Byrne wrote: We are giving RHEL-7 a pass on this iteration. For what it's worth, the problem described at the beginning of this thread doesn't happen in RHEL7. Yet. Supposedly systemd is being rebased in 7.2 so we'll see. This is why Fedora

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Jonathan Billings
On Fri, Jul 24, 2015 at 09:36:17AM -0500, Valeri Galtsev wrote: Indeed. And thanks to Linus we have Linux kernel. And thanks to Lennart we have config files polluted with XML tags. There's no XML in the systemd configuration language. You might be thinking of launchd. -- Jonathan Billings

Re: [CentOS] rsyslog.conf

2015-07-24 Thread m . roth
Jonathan Billings wrote: On Fri, Jul 24, 2015 at 09:16:26AM -0400, James B. Byrne wrote: We are giving RHEL-7 a pass on this iteration. For what it's worth, the problem described at the beginning of this thread doesn't happen in RHEL7. Yet. Supposedly systemd is being rebased in 7.2 so

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Ian Mortimer
On Sat, 25 Jul 2015, Always Learning wrote: There is absolutely no need to include irrelevant text when replying to a posting. Trim and Cut were sensible skills acquired by some of us in the 1980's and 1990's. Pertinent points pleases people perpetually. Precisely. A small amount of effort

Re: [CentOS] rsyslog.conf

2015-07-24 Thread James B. Byrne
On Thu, July 23, 2015 13:19, m.r...@5-cent.us wrote: Physically dragging the thread back on topic... I really am going crazy, trying to deal with the hourly logs from the loghost. We've got 170+ servers and workstations... but a *very* large percentage of what's showing up is from his bloody

Re: [CentOS] rsyslog.conf

2015-07-24 Thread Always Learning
On Fri, 2015-07-24 at 09:05 -0400, James B. Byrne wrote: However, forcing your correspondents to wade through an interminable wall of text that regurgitates the previous thread before getting to the point of the message arguably interferes with proper understanding no less than top-posting

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Chris Murphy
On Thu, Jul 23, 2015 at 2:17 PM, m.r...@5-cent.us wrote: https://bugzilla.redhat.com/show_bug.cgi?id=1227379 There's ~4 aspects to that bug so it's just going to have to settle out, with the main one being comment 25 where systemd-journald is enabling audit and inappropriately mixing data with

Re: [CentOS] rsyslog.conf

2015-07-23 Thread m . roth
Jonathan Billings wrote: On Thu, Jul 23, 2015 at 01:19:44PM -0400, m.r...@5-cent.us wrote: I really am going crazy, trying to deal with the hourly logs from the loghost. We've got 170+ servers and workstations... but a *very* large percentage of what's showing up is from his bloody new fedora

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Windsor Dave (AdP/TEF7)
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Leon Fauster Sent: Wednesday, July 22, 2015 6:20 PM To: CentOS mailing list Subject: Re: [CentOS] rsyslog.conf Am 22.07.2015 um 17:41 schrieb Windsor Dave (AdP/TEF7) dave.wind

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Jonathan Billings
On Thu, Jul 23, 2015 at 01:19:44PM -0400, m.r...@5-cent.us wrote: I really am going crazy, trying to deal with the hourly logs from the loghost. We've got 170+ servers and workstations... but a *very* large percentage of what's showing up is from his bloody new fedora 22, with its idiot

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Valeri Galtsev
On Thu, July 23, 2015 8:43 am, Windsor Dave (AdP/TEF7) wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Leon Fauster Sent: Wednesday, July 22, 2015 6:20 PM To: CentOS mailing list Subject: Re: [CentOS] rsyslog.conf Am 22.07.2015

Re: [CentOS] rsyslog.conf

2015-07-23 Thread m . roth
Windsor Dave (AdP/TEF7) wrote: Behalf Of Leon Fauster Am 22.07.2015 um 17:41 schrieb Windsor Dave (AdP/TEF7) dave.wind...@us.bosch.com: Sorry for the top post, Outlook defaults strike again. Outlook forces you to write above ? :-) Perhaps I should say instead that it strongly encourages

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Johnny Hughes
On 07/23/2015 09:34 AM, Valeri Galtsev wrote: On Thu, July 23, 2015 8:43 am, Windsor Dave (AdP/TEF7) wrote: -Original Message- snip Sorry for the top post, Outlook defaults strike again. Outlook forces you to write above ? :-) snip Perhaps I should say instead that it strongly

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Leon Fauster
Am 23.07.2015 um 16:34 schrieb Valeri Galtsev galt...@kicp.uchicago.edu: On Thu, July 23, 2015 8:43 am, Windsor Dave (AdP/TEF7) wrote: Perhaps I should say instead that it strongly encourages top posting, and all our internal emails follow that convention. It's habit-forming :-)

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Valeri Galtsev
On Thu, July 23, 2015 9:31 am, m.r...@5-cent.us wrote: Windsor Dave (AdP/TEF7) wrote: Behalf Of Leon Fauster Am 22.07.2015 um 17:41 schrieb Windsor Dave (AdP/TEF7) dave.wind...@us.bosch.com: Sorry for the top post, Outlook defaults strike again. Outlook forces you to write above ? :-)

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Valeri Galtsev
On Thu, July 23, 2015 10:45 am, Johnny Hughes wrote: On 07/23/2015 09:34 AM, Valeri Galtsev wrote: On Thu, July 23, 2015 8:43 am, Windsor Dave (AdP/TEF7) wrote: -Original Message- snip Sorry for the top post, Outlook defaults strike again. Outlook forces you to write above ?

Re: [CentOS] rsyslog.conf

2015-07-23 Thread m . roth
Leon Fauster wrote: Am 23.07.2015 um 18:06 schrieb Valeri Galtsev galt...@kicp.uchicago.edu: On Thu, July 23, 2015 10:45 am, Johnny Hughes wrote: The main reason actually is chronological order. But not just for the reply .. but for IN-LINE posting. In a discussion where you need to make

Re: [CentOS] rsyslog.conf

2015-07-23 Thread m . roth
Physically dragging the thread back on topic... I really am going crazy, trying to deal with the hourly logs from the loghost. We've got 170+ servers and workstations... but a *very* large percentage of what's showing up is from his bloody new fedora 22, with its idiot systemd logging of *ever*

Re: [CentOS] rsyslog.conf

2015-07-23 Thread Leon Fauster
Am 23.07.2015 um 18:06 schrieb Valeri Galtsev galt...@kicp.uchicago.edu: On Thu, July 23, 2015 10:45 am, Johnny Hughes wrote: The main reason actually is chronological order. But not just for the reply .. but for IN-LINE posting. In a discussion where you need to make points in-line and

Re: [CentOS] rsyslog.conf

2015-07-22 Thread Windsor Dave (AdP/TEF7)
Sorry for the top post, Outlook defaults strike again. Best regards Dave Windsor AdP/TEF7 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

[CentOS] rsyslog.conf

2015-07-22 Thread m . roth
I was looking at the manpage for rsyslog.conf, primarily because I need to filter my manager's new fedora 22 logs coming to our loghost, because of the bug that I forwarded (if it gets through). At any rate, I am surprised: under selectors, I see that The keywords error, warn and panic are

Re: [CentOS] rsyslog.conf

2015-07-22 Thread Windsor Dave (AdP/TEF7)
regards Dave Windsor AdP/TEF7 -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: Wednesday, July 22, 2015 11:07 AM To: CentOS Subject: [CentOS] rsyslog.conf I was looking at the manpage for rsyslog.conf, primarily

Re: [CentOS] rsyslog.conf

2015-07-22 Thread m . roth
Subject: [CentOS] rsyslog.conf I was looking at the manpage for rsyslog.conf, primarily because I need to filter my manager's new fedora 22 logs coming to our loghost, because of the bug that I forwarded (if it gets through). At any rate, I am surprised: under selectors, I see

Re: [CentOS] rsyslog.conf

2015-07-22 Thread Leon Fauster
Am 22.07.2015 um 17:41 schrieb Windsor Dave (AdP/TEF7) dave.wind...@us.bosch.com: Sorry for the top post, Outlook defaults strike again. Outlook forces you to write above ? :-) -- LF ___ CentOS mailing list CentOS@centos.org

[CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread James B. Byrne
In dealing with an unrelated issue I came across this in rsyslog.conf. # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.* -/var/log/maillog # Log

Re: [CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread Steven Tardy
On 06/05/2012 09:30 AM, James B. Byrne wrote: In dealing with an unrelated issue I came across this in rsyslog.conf. mail.* -/var/log/maillog Why is there a - before /var/log/maillog? man syslog.conf You may prefix each entry with the minus

Re: [CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread Philippe Naudin
Le mar. 05 juin 2012 10:30:25 CEST, James B. Byrne a écrit: In dealing with an unrelated issue I came across this in rsyslog.conf. # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.*

Re: [CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread Leonard den Ottolander
Hello James, On Tue, 2012-06-05 at 10:30 -0400, James B. Byrne wrote: In dealing with an unrelated issue I came across this in rsyslog.conf. # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place.

Re: [CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread Jerry Franz
On 06/05/2012 07:30 AM, James B. Byrne wrote: In dealing with an unrelated issue I came across this in rsyslog.conf. [...] Why is there a - before /var/log/maillog? [...] A leading '-' indicates the the log is written asynchronously. It is a performance tune to keep writing the syslog from

Re: [CentOS] rsyslog.conf - why the - in this entry? mail.* -/var/log/maillog

2012-06-05 Thread Philippe Naudin
Le mar. 05 juin 2012 17:06:32 CEST, Leonard den Ottolander a écrit: Hello James, On Tue, 2012-06-05 at 10:30 -0400, James B. Byrne wrote: In dealing with an unrelated issue I came across this in rsyslog.conf. # The authpriv file has restricted access. authpriv.*