[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: changing the default syslog daemon for lenny?



Patrick Winnertz wrote:
Am Montag, 28. Januar 2008 01:55:23 schrieb Michael Biebl:
rsyslog is also a drop in replacement, even more so, as it can
understand the syntax of sysklogd. The default rsyslog config file
/etc/rsyslog.conf is basically a copy of /etc/syslog.conf.
So if you have a custom syslog.conf, you could either copy it to
/etc/rsyslog.conf or start rsyslogd with -f /etc/syslog.conf.

rsyslog also allows to include other config files. The default
/etc/rsyslog.conf is setup to include all files in
/etc/rsyslog.d/*.conf.
I would go also for rsyslog. The feature to add configuration files to rsyslog without touching configuration files in postinst scripts of other packages is really important for some other Debian releated Groups (e.g. Debian Edu).


As a (simple) example:

If you want to filter out the messages of e.g. NetworkManager into a separate logfile, just drop a file networkmanager.conf into /etc/rsyslog.d, containing the line

:programname, contains, "NetworkManager" -/var/log/NetworkManager.log

Packages could ship such files themselves, which would allow for more fine-grained logging. rsyslog allows to filter based on a lot more properties (and also regexps) [1][2].


Cheers,
Michael

[1] http://www.rsyslog.com/module-Static_Docs-view-f-rsyslog_conf.html.phtml
[2] http://www.rsyslog.com/module-Static_Docs-view-f-property_replacer.html.phtml
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: