Logging twice

This is the place for you, if you got rsyslog up and running but wonder how to make it do what you want.

Moderator: rgerhards

Logging twice

Postby selfish on Fri Jan 04, 2008 6:45 pm

I'm pretty new to syslogging, so please forgive me. When an entry is logged from a remote device it gets logged in my syslog file and the local.log file. Is that because I have both local7 and local0.none? I'm a little confused on the 'local' keyword.

thanks

d

This is my /etc/rsyslog.conf:



$template Dynauth,"/var/log/%HOSTNAME%/auth.log"
auth,authpriv.* ?Dynauth

$template Dynsys,"/var/log/%HOSTNAME%/syslog"
*.*;auth,authpriv,cron,mail,local0.none -?Dynsys

$template Dyncron,"/var/log/%HOSTNAME%/cron.log"
cron.* ?Dyncron

$template Dynalocal,"/var/log/%HOSTNAME%/local.log"
local7.* ?Dynalocal

$template Dyndaemon,"/var/log/%HOSTNAME%/daemon.log"
daemon.* -?Dyndaemon

$template Dynkern,"/var/log/%HOSTNAME%/kern.log"
kern.* -?Dynkern

$template Dynlpr,"/var/log/%HOSTNAME%/lpr.log"
lpr.* -?Dynlpr

$template Dynmail,"/var/log/%HOSTNAME%/mail/mail.log"
mail.* -?Dynmail

$template Dynuser,"/var/log/%HOSTNAME%/user.log"
user.* -?Dynuser

$template Dynuucp,"/var/log/%HOSTNAME%/uucp.log"
uucp.* ?Dynuucp

$template Dynmailinfo,"/var/log/%HOSTNAME%/mail/mail.info"
mail.info -?Dynmailinfo

$template Dynmailwarn,"/var/log/%HOSTNAME%/mail/mail.warn"
mail.warn -?Dynmailwarn

$template Dynmailerr,"/var/log/%HOSTNAME%/mail/mail.err"
mail.err ?Dynmailerr
selfish
New
 
Posts: 7
Joined: Fri Dec 28, 2007 9:26 pm

Professional Services Information

  • Custom written rsyslog.conf?
  • Maintenance Contract?
  • Installation support?

Google Ads


Return to Configuration

Who is online

Users browsing this forum: No registered users and 1 guest

cron