[gentoo-user] syslog-ng facility

[gentoo-user] syslog-ng facility

[Arnau Bria]

Hi,

I've installed syslog-ng and I was configuring it.
I'd like to separate ssh and named logs from messages, so I thought
each of that services had a "facilty", so I defined them and restarted
syslog-ng, but it fails saying that it does not know those facilities...

#filter f_named { facility(named); };
#filter f_sshd { facility(sshd); };

I have testes with named, sshd, bind, ssh...

So, how may I separate this services logs?
I used metalog and there you can use reg expressions, may I use it here
too?

Where may I find a list of facilities?


Cheers!

-- 
Arnau Bria
http://blog.emergetux.net
Wiggum: Dispara a las ruedas Lou.
Lou: eee, es un tanque jefe.
Wiggum: Me tienes hartito con todas tus excusas.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] syslog-ng facility

[Daniel Iliev]

Arnau Bria wrote:
> Hi,
>
> I've installed syslog-ng and I was configuring it.
> I'd like to separate ssh and named logs from messages, so I thought
> each of that services had a "facilty", so I defined them and restarted
> syslog-ng, but it fails saying that it does not know those facilities...
>
> #filter f_named { facility(named); };
> #filter f_sshd { facility(sshd); };
>
> I have testes with named, sshd, bind, ssh...
>
> So, how may I separate this services logs?
> I used metalog and there you can use reg expressions, may I use it here
> too?
>
> Where may I find a list of facilities?
>
>
> Cheers!
>
>   


Yes, you can separate the logs.
Take a look at this example. I think it would be helpful.

http://ben.muppethouse.com/SYSLOG-DOC.html

-- 
Best regards,
Daniel


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] syslog-ng facility

[Arnau Bria]

On Tue, 14 Nov 2006 14:04:00 +0200
Daniel Iliev wrote:

> Arnau Bria wrote:
Hi Daniel,

[...]
> > Where may I find a list of facilities?

> Yes, you can separate the logs.
> Take a look at this example. I think it would be helpful.
> 
> http://ben.muppethouse.com/SYSLOG-DOC.html

I was looking for a list of facilities, cause I was wondering if named
and ssh were ones or not. I finally separated it with "program" filter
rule.

I finally found facility list in metalog man page:

Facility names  are  :  "auth",  "authpriv", "cron", "daemon", "ftp",
"kern", "lpr", "mail", "news", "security", "syslog", "user", "uucp",
"local0", "local1" ... "local7"

thanks for your reply.

-- 
Arnau Bria
http://blog.emergetux.net
Wiggum: Dispara a las ruedas Lou.
Lou: eee, es un tanque jefe.
Wiggum: Me tienes hartito con todas tus excusas.
-- 
gentoo-user@gentoo.org mailing list