Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Jun 2000 16:53:43 +0200 (SAST)
From:      Johan Kruger <jkruger@oskar.dev.nanoteq.co.za>
To:        Dan Nelson <dnelson@emsphone.com>, freebsd-hackers@FreeBSD.ORG, FreeBSD-Questions <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Remote syslog with a tag ?
Message-ID:  <XFMail.000613165343.jkruger@oskar.dev.nanoteq.co.za>
In-Reply-To: <20000613091107.A24675@dan.emsphone.com>

next in thread | previous in thread | raw e-mail | index | archive | help
*:)
I know they are tagged - but the following does not work:
-------------  Example --------------
Jun 13 16:41:51 4.5.6.1 root: package=etc 1.2.3.1:/etc/ -> /etc/ 
Jun 13 16:41:51 4.5.6.1 root: package=etc 1.2.3.1:/etc/ -> /etc/ 
Jun 13 16:41:51 4.5.6.1 root: Scanning local directory /etc/ 
Jun 13 16:41:51 4.5.6.1 root: Scanning local directory /etc/ 
Jun 13 16:41:51 4.5.6.1 root: Already connected to site 1.2.3.1 
Jun 13 16:41:51 4.5.6.1 root: Already connected to site 1.2.3.1 
Jun 13 16:41:51 4.5.6.1 root: Scanning remote directory /etc/ 
Jun 13 16:41:51 4.5.6.1 root: Scanning remote directory /etc/ 
-------- above is my local file ---------------
If i specify 
----------------- /etc/syslog.conf -------
!root
*.notice;kern.debug;lpr.info;mail.crit;news.err         /var/log/slave
------------------------------------------------------------------------
it works correct - BUT - i want to specify "4.5.6.1" since other messages
might be logged on the local machine as root, and then the messages of both
machines will go to /var/log/slave

i tried 
---------
!4.5.6.1
and
!4\.5\.6\.1
and
!"4.5.6.1"

The man page says " ... and the first word in the message after
     the date matches the program, the action specified in the action field
     will be taken ..."
Now the program should the be !4.5.6.1 or one of the ones i previously
mentioned.

I think i'll go check syslogd's source and see how the string compare is done.
P.S - I don't want to use the machine's name - i like i.p. *;)


> 
> Jun  9 10:34:46 hp8100mp1 printer: paper jam
> Jun  9 10:35:12 hp8100mp1 printer: error cleared
> Jun 13 08:14:43 hp4000sa printer: paper out
> Jun 13 08:14:43 hp4000sa printer: error cleared
> 
> so, they are already tagged.
> 
> -- 
>       Dan Nelson
>       dnelson@emsphone.com

----------------------------------
E-Mail: Johan Kruger <jkruger@oskar.dev.nanoteq.co.za>
Date: 13-Jun-00
Time: 16:40:14

This message was sent by XFMail
----------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.000613165343.jkruger>