Date: Tue, 17 Jul 2001 14:21:40 -0500 From: "Kanno, Ken" <kkanno@rivenet.com> To: 'Jim King' <jim@jimking.net>, "Kanno, Ken" <kkanno@rivenet.com>, 'David Malone' <dwmalone@maths.tcd.ie> Cc: "'stable@freebsd.org'" <stable@FreeBSD.ORG> Subject: RE: syslog config Message-ID: <0C3A66859AEF6E42A1B4AB53307B77AA0AF4D2@ex02.ad.rivenet.com>
next in thread | raw e-mail | index | archive | help
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C10EF5.B4813EB0
Content-Type: text/plain;
charset="iso-8859-1"
I now have:
*.notice;kern.debug;lpr.info;mail.crit;news.err;local4.none
/var/log/messages
in /etc/syslog.conf. I HUPed syslogd and the messages are still being
written to messages.
KEN
-----Original Message-----
From: Jim King [mailto:jim@jimking.net]
Sent: Tuesday, July 17, 2001 2:18 PM
To: Kanno, Ken; 'David Malone'
Cc: 'stable@freebsd.org'
Subject: Re: syslog config
RE: syslog configYou probably want to add "local4.none" to the
/var/log/messages line; this will prevent local4 messages from being logged
in that file.
Jim
----- Original Message -----
From: Kanno, Ken
To: 'David Malone' ; Kanno, Ken
Cc: 'stable@freebsd.org'
Sent: Tuesday, July 17, 2001 2:12 PM
Subject: RE: syslog config
Where should I add this "!*"?
I tried adding one on a new line before my local4.emerg and killed syslog
and restarted it. Nothing had changed. Everyghing ends up in messages.
-----Original Message-----
From: David Malone [mailto:dwmalone@maths.tcd.ie]
Sent: Tuesday, July 17, 2001 2:05 PM
To: Kanno, Ken
Cc: 'stable@freebsd.org'
Subject: Re: syslog config
> !startslip
> *.* /var/log/slip.log
> !ppp
> *.* /var/log/ppp.log
>
> local4.emerg /opt/syslog/pix_msg0
> local4.alert /opt/syslog/pix_msg1
> local4.crit /opt/syslog/pix_msg2
> local4.error /opt/syslog/pix_msg3
> local4.warn /opt/syslog/pix_msg4
> local4.notice /opt/syslog/pix_msg5
> local4.info /opt/syslog/pix_msg6
> local4.debug /opt/syslog/pix_msg7
You have put the new lines after a "!ppp" line, which means that it
will only log if the program name is ppp. Try adding "!*" to indicate
all programs.
David.
------_=_NextPart_001_01C10EF5.B4813EB0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>RE: syslog config</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=3D2>I now have:</FONT>
</P>
<P><FONT =
SIZE=3D2>*.notice;kern.debug;lpr.info;mail.crit;news.err;local4.none&nbs=
p; /var/log/messages</FONT>
</P>
<P><FONT SIZE=3D2>in /etc/syslog.conf. I HUPed syslogd and the messages =
are still being written to messages.</FONT>
</P>
<P><FONT SIZE=3D2>KEN</FONT>
</P>
<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Jim King [<A =
HREF=3D"mailto:jim@jimking.net">mailto:jim@jimking.net</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Tuesday, July 17, 2001 2:18 PM</FONT>
<BR><FONT SIZE=3D2>To: Kanno, Ken; 'David Malone'</FONT>
<BR><FONT SIZE=3D2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=3D2>Subject: Re: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=3D2>RE: syslog configYou probably want to add =
"local4.none" to the</FONT>
<BR><FONT SIZE=3D2>/var/log/messages line; this will prevent local4 =
messages from being logged</FONT>
<BR><FONT SIZE=3D2>in that file.</FONT>
</P>
<P><FONT SIZE=3D2>Jim</FONT>
</P>
<BR>
<P><FONT SIZE=3D2>----- Original Message -----</FONT>
<BR><FONT SIZE=3D2>From: Kanno, Ken</FONT>
<BR><FONT SIZE=3D2>To: 'David Malone' ; Kanno, Ken</FONT>
<BR><FONT SIZE=3D2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=3D2>Sent: Tuesday, July 17, 2001 2:12 PM</FONT>
<BR><FONT SIZE=3D2>Subject: RE: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=3D2>Where should I add this "!*"?</FONT>
<BR><FONT SIZE=3D2>I tried adding one on a new line before my =
local4.emerg and killed syslog</FONT>
<BR><FONT SIZE=3D2>and restarted it. Nothing had changed. Everyghing =
ends up in messages.</FONT>
<BR><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: David Malone [<A =
HREF=3D"mailto:dwmalone@maths.tcd.ie">mailto:dwmalone@maths.tcd.ie</A>]<=
/FONT>
<BR><FONT SIZE=3D2>Sent: Tuesday, July 17, 2001 2:05 PM</FONT>
<BR><FONT SIZE=3D2>To: Kanno, Ken</FONT>
<BR><FONT SIZE=3D2>Cc: 'stable@freebsd.org'</FONT>
<BR><FONT SIZE=3D2>Subject: Re: syslog config</FONT>
</P>
<BR>
<P><FONT SIZE=3D2>> !startslip</FONT>
<BR><FONT SIZE=3D2>> =
*.* &nb=
sp; &nb=
sp; &nb=
sp; =
/var/log/slip.log</FONT>
<BR><FONT SIZE=3D2>> !ppp</FONT>
<BR><FONT SIZE=3D2>> =
*.* &nb=
sp; &nb=
sp; &nb=
sp; =
/var/log/ppp.log</FONT>
<BR><FONT SIZE=3D2>></FONT>
<BR><FONT SIZE=3D2>> =
local4.emerg =
=
=
/opt/syslog/pix_msg0</FONT>
<BR><FONT SIZE=3D2>> =
local4.alert =
=
=
/opt/syslog/pix_msg1</FONT>
<BR><FONT SIZE=3D2>> =
local4.crit &=
nbsp; &=
nbsp; &=
nbsp; /opt/syslog/pix_msg2</FONT>
<BR><FONT SIZE=3D2>> local4.error =
=
=
/opt/syslog/pix_msg3</FONT>
<BR><FONT SIZE=3D2>> =
local4.warn &=
nbsp; &=
nbsp; &=
nbsp; /opt/syslog/pix_msg4</FONT>
<BR><FONT SIZE=3D2>> =
local4.notice  =
;  =
; =
/opt/syslog/pix_msg5</FONT>
<BR><FONT SIZE=3D2>> =
local4.info &=
nbsp; &=
nbsp; &=
nbsp; /opt/syslog/pix_msg6</FONT>
<BR><FONT SIZE=3D2>> =
local4.debug =
=
=
/opt/syslog/pix_msg7</FONT>
<BR><FONT SIZE=3D2>You have put the new lines after a "!ppp" =
line, which means that it</FONT>
<BR><FONT SIZE=3D2>will only log if the program name is ppp. Try adding =
"!*" to indicate</FONT>
<BR><FONT SIZE=3D2>all programs.</FONT>
<BR><FONT SIZE=3D2> =
David.</FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C10EF5.B4813EB0--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0C3A66859AEF6E42A1B4AB53307B77AA0AF4D2>