On 1/8/03 10:11 pm, "edj" <[EMAIL PROTECTED]> wrote:
> On Friday 01 August 2003 02:43 pm, Stroller wrote:
>> On 1/8/03 6:11 pm, "edj" <[EMAIL PROTECTED]> wrote:
>>> Using syslog-ng. /var/log/messages fills with "syslog-ng[717]:
>>> STATS: dropped 0", one after another. OK - so syslog is working.
>>> However, an identical log appears in /var/log/syslog. How to keep
>>> it from logging to messages? Sorry, but syslog.conf is gibberish
>>> to me, and the man page is not very helpful. Any advice
>>> appreciated. Thanks.
>
>> # Syslog-ng default configuration file for Gentoo Linux
>> # contributed by Michael Sterrett
>>
>> options {
>> long_hostnames(off);
>> sync(0);
>>
>> # The default action of syslog-ng 1.6.0 is to log a STATS
>> line # to the file every 10 minutes. That's pretty ugly after a
>> while. # Change it to every 12 hours so you get a nice daily update
>> of # how many messages syslog-ng missed (0).
>> stats(43200);
>> };
>
> The generation of STATS lines isn't the problem. It's their
> destination. How to keep 'em out of /var/log/messages?
Whups! Sorry!
I think something like:
destination syslog { file("/var/log/syslog"); };
filter f_sysl-ng { program("syslog-ng"); };
log { source(src); filter(f_sysl-ng); destination(syslog); flags(final); };
Should get it. You'll obviously need to juggle this with your other filters.
HTH,
Stroller.
--
stroller at bigfoot dot com
Phone: +(44) 908 513 513
Cellular: +(44) 7740 337 495
Fax/Voicemail: +(44) 870 131 2710
--
[EMAIL PROTECTED] mailing list
