Re: new policy topic --- syslog() [was Re: syslog facilities]
Hi,
The problem with this is that specifying a syslog policy is so
hard to do (it is a very personal issue). For example, if we ask
people to show what their syslog.conf does, I think we shall find
little convergence. For example, I like some duplication, as can be
seen in my syslog.conf below (I log indexed on facilities as well as
priorities).
On the other hand, if a reasonable consensus is achievable,
this might be a good thing ;-). However, I think we should at east
decide on a set of faciliteies reserved for the local sysadmin,
before starting on the grand syslog.conf unification.
manoj
--
Brevity and superficiality are often concomitants. -- Amrom Katz
Manoj Srivastava <srivasta@acm.org> <http://www.datasync.com/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E
#______________________________cut here______________________________
# /etc/syslog.conf Configuration file for syslogd.
#
# For more information see syslog.conf(5)
# manpage.
# You have to use tabs here!
#
# Various facilities
#
auth,authpriv.* /var/log/auth.log
daemon.info -/var/log/daemon.log
kern.info /var/log/kernel
lpr.* -/var/log/lpr.log
user.* -/var/log/user.log
uucp.* -/var/log/uucp.log
#cron.* /var/log/cron.log
#
# Logging based on priorities
#
*.=emerg /var/log/emerg
*.=alert /var/log/alert
*.=crit;news.none /var/log/critical
*.=err;auth,cron,daemon,kern,news.none /var/log/syserror
#
# Some `catch-all' logfiles.
#
*.=debug;\
auth,authpriv.none;\
news.none;mail.none -/var/log/debug
*.=info;*.=notice;*.=warning;\
auth,authpriv,cron,daemon,kern,news.none -/var/log/messages
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#
mail.=info -/var/log/mail.info
mail.=warning -/var/log/mail.warn
mail.=err /var/log/mail.err
mail.* -/var/log/mail.log
# The news subsystem
news.=crit /var/log/news/news.crit
news.=err /var/log/news/news.err
news.info -/var/log/news/news.notice
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
local0.*;*.=alert;*.=emerg;*.=crit;*.=err;\
*.=warning;*.=info;*.=notice;*.=debug;cron.none /dev/tty8
# The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
# you must invoke `xconsole' with the `-file' option:
#
# $ xconsole -file /dev/xconsole [...]
local0.*;*.=debug;*.=info;*.=notice;\
*.=warning;*.=err;*.=crit;*.=alert;*.=emerg;cron.none |/dev/xconsole
#
# Local and automatically added stuff
#
local0.* -/var/log/queries.log
local2.* -/var/log/ppp.log
#-- hylafax begin
local5.* -/var/log/hylafax/hylafax.log
#-- hylafax end
Reply to: