[gentoo-user] which syslog?

[gentoo-user] which syslog?

[Sven Köhler]

[-- Attachment #1: Type: text/plain, Size: 496 bytes --]

Hi,

so until recently, i have been using sysklogd. So i had my auth.log,
mail.log, syslog, messages, etc. in /var/log.

Now i switched to syslog-ng. Now, only /var/log/messages gets filled
with all, that i would expect in auth.log or mail.log.

Maybe syslog-ng can be configured to behave like sysklogd. But i would
rather like a default-config that behaves like sysklogd.


So the next thing i could try is metalog.

Does it have a nice default config?



Regards,
  Sven


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]

[gentoo-user] Re: which syslog?

[Anno v. Heimburg]

Sven Köhler wrote:
> So the next thing i could try is metalog.
> 
> Does it have a nice default config?

I think so, but I did modify it to better suit my needs. It doesn't need
logrotate, which IMHO is a big plus, and I find its filters much easier to
set up than syslog-ng's. I am curious, though: If you like the sysklogd
layout to the point that you want to replicate it exactly in other log
daemons, why do you want to switch log daemons?

Anno.

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] which syslog?

[Alan McKinnon]

On Wednesday 30 May 2007, Sven Köhler wrote:
> Hi,
>
> so until recently, i have been using sysklogd. So i had my auth.log,
> mail.log, syslog, messages, etc. in /var/log.
>
> Now i switched to syslog-ng. Now, only /var/log/messages gets filled
> with all, that i would expect in auth.log or mail.log.

Did you configure syslog-ng correctly?

It does not read /etc/syslog.conf, it 
reads /etc/syslog-ng/syslog-ng.conf for it's configuration. Chances are 
the default is to send most everything to messages

alan

-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
--
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: which syslog?

[Sven Köhler]

[-- Attachment #1: Type: text/plain, Size: 641 bytes --]

I am curious, though: If you like the sysklogd
> layout to the point that you want to replicate it exactly in other log
> daemons, why do you want to switch log daemons?

Last sysklogd version if from 2001.
And portage contains 1.4.2_pre2007* versions. This was curious to me.

And on the other hand, other distributions don't use sysklogd anymore.
Instead they use syslog-ng, for example.

But i guess, they have a more suitable default setting. Everything going
to /var/log/messes is just to simple, i think. Actually i don't want the
layout to be like sysklogd. But i would like a little more complicated
default setting.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 249 bytes --]

Re: [gentoo-user] Re: which syslog?

[Galevsky]

http://gentoo-wiki.com/Syslog-ng

Is that kind of conf (described in Quick Start section) far away from
what you are looking for ?

Gal'

2007/5/30, Sven Köhler <skoehler@upb.de>:
> I am curious, though: If you like the sysklogd
> > layout to the point that you want to replicate it exactly in other log
> > daemons, why do you want to switch log daemons?
>
> Last sysklogd version if from 2001.
> And portage contains 1.4.2_pre2007* versions. This was curious to me.
>
> And on the other hand, other distributions don't use sysklogd anymore.
> Instead they use syslog-ng, for example.
>
> But i guess, they have a more suitable default setting. Everything going
> to /var/log/messes is just to simple, i think. Actually i don't want the
> layout to be like sysklogd. But i would like a little more complicated
> default setting.
>
>
>
--
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: which syslog?

[Anno v. Heimburg]

Sven Köhler wrote:

> But i guess, they have a more suitable default setting. Everything going
> to /var/log/messes is just to simple, i think. Actually i don't want the
> layout to be like sysklogd. But i would like a little more complicated
> default setting.

Okay, in that case, I'll say that metalog has a very-sensible-to-me default
setting, tweaking which I resisted for quite some time. What seems sensible
to me might be lunacy to you, however, so have a go at it and see for
yourself.

Anno.

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: which syslog?

[darren kirby]

quoth the Sven Köhler:
> > It does not read /etc/syslog.conf, it
> > reads /etc/syslog-ng/syslog-ng.conf for it's configuration. Chances are
> > the default is to send most everything to messages
>
> Yes, that's the default.
>
> And actually, i don't want to configure all my machines. I would prefer
> a more suitable default config.

You're using the wrong OS then ;)

Is it really too hard to copy and paste the config from the quickstart guide 
that Galevsky posted a link to? 

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: which syslog?

[darren kirby]

quoth the kashani:
> darren kirby wrote:
> > quoth the Sven Köhler:
> >>> It does not read /etc/syslog.conf, it
> >>> reads /etc/syslog-ng/syslog-ng.conf for it's configuration. Chances are
> >>> the default is to send most everything to messages
> >>
> >> Yes, that's the default.
> >>
> >> And actually, i don't want to configure all my machines. I would prefer
> >> a more suitable default config.
> >
> > You're using the wrong OS then ;)
> >
> > Is it really too hard to copy and paste the config from the quickstart
> > guide that Galevsky posted a link to?
> >
> > -d
>
> 	Sane defaults, which Gentoo has most of the time, would be nice in this
> case. Oddly Gentoo used to include a nice syslog-ng.conf back in
> 2003/2004 which was dropped in favor of the current lobotomized conf file.
>
> kashani

Perhaps we need an enhancement bug. See if it gains any traction. I can only 
imagine that the syslog-ng dev(s) thinks /var/log/messages alone is the sane 
default. 

Oh, here it is:
http://bugs.gentoo.org/show_bug.cgi?id=108313

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972
--
gentoo-user@gentoo.org mailing list