From owner-freebsd-hackers Tue Jun 13 7:47:53 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from ockle.dev.nanoteq.co.za (ockle.dev.nanoteq.co.za [196.7.114.28]) by hub.freebsd.org (Postfix) with ESMTP id 1AFEE37BAD3; Tue, 13 Jun 2000 07:47:38 -0700 (PDT) (envelope-from johan@ockle.dev.nanoteq.co.za) Received: (from johan@localhost) by ockle.dev.nanoteq.co.za (8.9.3/8.9.3) id QAA05554; Tue, 13 Jun 2000 16:53:44 +0200 (SAST) (envelope-from johan) Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20000613091107.A24675@dan.emsphone.com> Date: Tue, 13 Jun 2000 16:53:43 +0200 (SAST) Organization: Nanoteq From: Johan Kruger To: Dan Nelson , freebsd-hackers@FreeBSD.ORG, FreeBSD-Questions Subject: Re: Remote syslog with a tag ? Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG *:) I know they are tagged - but the following does not work: ------------- Example -------------- Jun 13 16:41:51 4.5.6.1 root: package=etc 1.2.3.1:/etc/ -> /etc/ Jun 13 16:41:51 4.5.6.1 root: package=etc 1.2.3.1:/etc/ -> /etc/ Jun 13 16:41:51 4.5.6.1 root: Scanning local directory /etc/ Jun 13 16:41:51 4.5.6.1 root: Scanning local directory /etc/ Jun 13 16:41:51 4.5.6.1 root: Already connected to site 1.2.3.1 Jun 13 16:41:51 4.5.6.1 root: Already connected to site 1.2.3.1 Jun 13 16:41:51 4.5.6.1 root: Scanning remote directory /etc/ Jun 13 16:41:51 4.5.6.1 root: Scanning remote directory /etc/ -------- above is my local file --------------- If i specify ----------------- /etc/syslog.conf ------- !root *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/slave ------------------------------------------------------------------------ it works correct - BUT - i want to specify "4.5.6.1" since other messages might be logged on the local machine as root, and then the messages of both machines will go to /var/log/slave i tried --------- !4.5.6.1 and !4\.5\.6\.1 and !"4.5.6.1" The man page says " ... and the first word in the message after the date matches the program, the action specified in the action field will be taken ..." Now the program should the be !4.5.6.1 or one of the ones i previously mentioned. I think i'll go check syslogd's source and see how the string compare is done. P.S - I don't want to use the machine's name - i like i.p. *;) > > Jun 9 10:34:46 hp8100mp1 printer: paper jam > Jun 9 10:35:12 hp8100mp1 printer: error cleared > Jun 13 08:14:43 hp4000sa printer: paper out > Jun 13 08:14:43 hp4000sa printer: error cleared > > so, they are already tagged. > > -- > Dan Nelson > dnelson@emsphone.com ---------------------------------- E-Mail: Johan Kruger Date: 13-Jun-00 Time: 16:40:14 This message was sent by XFMail ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message