Re: sysklogd => syslog-ng
On Fri, Aug 24, 2001 at 04:34:48PM +0200, Krzysztof Krzyzaniak wrote:
> > syslog-ng doesn't need klogd to log kernel infos. It does this by
> > itself.
> Hmm, you're right, but I have in syslog-ng.conf
> destination kern { file("/var/log/kern.log" owner("root") group("adm") group("adm") perm(0640)); };
> filter f_kern { facility(kern); };
> log { source(src); filter(f_kern); destination(kern); };
> and
> fargo@eloy:/etc/syslog-ng{12}% more klogctl
> KLOGCTL=6
> And kern.log is always empty (I have ipchains logging turn on).
You need to tell syslog-ng to read the kernel messages from the
special file (fifo) `/proc/kmsg'. For example, I have the following
sources in `/etc/syslog-ng/syslog-ng.conf':
source src { unix-stream("/dev/log");
fifo("/proc/kmsg");
internal(); };
AFAIK you'll still have to use klogd if you want to have addresses in
kernel messages replaced with symbolic names from System.map.
--
BALI, Andra's GPG keyID: 78560E1C
drewie@bigfoot.com bali@debian.org andras.bali@stud.bke.hu
Reply to: