|
I am trying to consolidate my cfengine syslog entries from multiple systems. I noticed that either cfagent or cfrun logs entries using the word “syslog” as the error string. This not unique for searching purposes and it is not clear to me which application is writing to the log!
Example:
May 10 10:27:31 test1 cfservd[11570]: Accepting connection from ::ffff:… May 10 10:27:32 test1 cfservd[11570]: Accepting connection from ::ffff:… May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cf.main May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cf.main had permission 600, changed it to 644 May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cfagent.conf May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cfagent.conf had permission 600, changed it to 644 May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cfrun.hosts May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cfrun.hosts had permission 600, changed it to 644
Notice the “syslog:” - the name syslog is not unique and does not tell me which application!
I suggest a change here, I don’t know where it is being logged; however, I would replace: errstr=syslog Change it with: errstr=cfrun_syslog or cfagent_syslog or whichever application as the prefix.
syslog(LOG_ERR, " %s: %s",errstr,);
Thank you for your consideration.
-Yehia
|
_______________________________________________ Bug-cfengine mailing list Bug-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/bug-cfengine
