Package: syslog-ng
Version: 3.1.1-3
Severity: important
Upon upgrading to 3.1.x I get only useless stats in my /var/log/syslog.
Two problems:
- "stats_freq(0)" should be added to default syslog-ng.conf
- facility(syslog) logs nothing at all, so I reverted f_syslog3 to my
previous:
filter f_syslog3 { not facility(auth, authpriv) and not filter(f_debug); };
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (499,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.34-1-pyrrhus64 (SMP w/4 CPU cores)
Locale: LANG=en_CA, lc_ctype=fr...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
Versions of packages syslog-ng depends on:
ii libc6 2.11.2-1 Embedded GNU C Library: Shared lib
ii libdbi0 0.8.2-3 Database Independent Abstraction L
ii libevtlog0 0.2.8~1-2 Syslog event logger library
ii libglib2.0-0 2.24.1-1 The GLib library of C routines
ii libnet1 1.1.4-2 library for the construction and h
ii libpcre3 8.02-1 Perl 5 Compatible Regular Expressi
ii libssl0.9.8 0.9.8o-1 SSL shared libraries
ii libwrap0 7.6.q-19 Wietse Venema's TCP wrappers libra
ii lsb-base 3.2-23.1 Linux Standard Base 3.2 init scrip
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
Versions of packages syslog-ng recommends:
ii logrotate 3.7.8-6 Log rotation utility
Versions of packages syslog-ng suggests:
pn libdbd-mysql <none> (no description available)
pn libdbd-pgsql <none> (no description available)
pn libdbd-sqlite3 <none> (no description available)
-- Configuration Files:
/etc/syslog-ng/syslog-ng.conf changed:
@version: 3.0
options {
# disable the chained hostname format in logs
# (default is enabled)
chain_hostnames(0);
# the time to wait before a died connection is re-established
# (default is 60)
time_reopen(10);
# the time to wait before an idle destination file is closed
# (default is 60)
time_reap(360);
# the number of lines buffered before written to file
# you might want to increase this if your disk isn't catching with
# all the log messages you get or if you want less disk activity
# (say on a laptop)
# (default is 0)
#sync(0);
# the number of lines fitting in the output queue
log_fifo_size(2048);
# enable or disable directory creation for destination files
create_dirs(yes);
# default owner, group, and permissions for log files
# (defaults are 0, 0, 0600)
#owner(root);
group(adm);
perm(0640);
# default owner, group, and permissions for created directories
# (defaults are 0, 0, 0700)
#dir_owner(root);
#dir_group(root);
dir_perm(0755);
# enable or disable DNS usage
# syslog-ng blocks on DNS queries, so enabling DNS may lead to
# a Denial of Service attack
# (default is yes)
use_dns(no);
# maximum length of message in bytes
# this is only limited by the program listening on the /dev/log Unix
# socket, glibc can handle arbitrary length log messages, but -- for
# example -- syslogd accepts only 1024 bytes
# (default is 2048)
#log_msg_size(2048);
#Disable statistic log messages.
stats_freq(0);
# Some program send log messages through a private implementation.
# and sometimes that implementation is bad. If this happen syslog-ng
# may recognise the program name as hostname. Whit this option
# we tell the syslog-ng that if a hostname match this regexp than that
# is not a real hostname.
bad_hostname("^gconfd$");
};
source s_all {
# message generated by Syslog-NG
internal();
# standard Linux log source (this is the default place for the syslog()
# function to send logs to)
unix-stream("/dev/log");
# messages from the kernel
file("/proc/kmsg" log_prefix("kernel: "));
# use the following line if you want to receive remote UDP logging
messages
# (this is equivalent to the "-r" syslogd flag)
# udp();
};
destination df_auth { file("/var/log/auth.log"); };
destination df_syslog { file("/var/log/syslog"); };
destination df_cron { file("/var/log/cron.log"); };
destination df_daemon { file("/var/log/daemon.log"); };
destination df_kern { file("/var/log/kern.log"); };
destination df_lpr { file("/var/log/lpr.log"); };
destination df_mail { file("/var/log/mail.log"); };
destination df_user { file("/var/log/user.log"); };
destination df_uucp { file("/var/log/uucp.log"); };
destination df_facility_dot_info { file("/var/log/$FACILITY.info"); };
destination df_facility_dot_notice { file("/var/log/$FACILITY.notice"); };
destination df_facility_dot_warn { file("/var/log/$FACILITY.warn"); };
destination df_facility_dot_err { file("/var/log/$FACILITY.err"); };
destination df_facility_dot_crit { file("/var/log/$FACILITY.crit"); };
destination df_news_dot_notice { file("/var/log/news/news.notice"
owner("news")); };
destination df_news_dot_err { file("/var/log/news/news.err" owner("news")); };
destination df_news_dot_crit { file("/var/log/news/news.crit" owner("news")); };
destination df_debug { file("/var/log/debug"); };
destination df_messages { file("/var/log/messages"); };
destination dp_xconsole { pipe("/dev/xconsole"); };
destination du_all { usertty("*"); };
filter f_auth { facility(auth, authpriv); };
filter f_syslog { not facility(auth, authpriv)
and not match("modprobe: WARNING: All config files need .conf");
};
filter f_cron { facility(cron); };
filter f_daemon { facility(daemon); };
filter f_kern { facility(kern); };
filter f_lpr { facility(lpr); };
filter f_mail { facility(mail); };
filter f_news { facility(news); };
filter f_user { facility(user); };
filter f_uucp { facility(uucp); };
filter f_at_least_info { level(info..emerg); };
filter f_at_least_notice { level(notice..emerg); };
filter f_at_least_warn { level(warn..emerg); };
filter f_at_least_err { level(err..emerg); };
filter f_at_least_crit { level(crit..emerg); };
filter f_debug { level(debug) and not facility(auth, authpriv, news, mail); };
filter f_messages {
level(info,notice,warn)
and not facility(auth,authpriv,cron,daemon,mail,news);
};
filter f_emerg { level(emerg); };
filter f_xconsole {
facility(daemon,mail)
or level(debug,info,notice,warn)
or (facility(news)
and level(crit,err,notice));
};
log {
source(s_all);
filter(f_auth);
destination(df_auth);
};
log {
source(s_all);
filter(f_syslog);
destination(df_syslog);
};
log {
source(s_all);
filter(f_daemon);
destination(df_daemon);
};
log {
source(s_all);
filter(f_kern);
destination(df_kern);
};
log {
source(s_all);
filter(f_lpr);
destination(df_lpr);
};
log {
source(s_all);
filter(f_mail);
destination(df_mail);
};
log {
source(s_all);
filter(f_user);
destination(df_user);
};
log {
source(s_all);
filter(f_uucp);
destination(df_uucp);
};
log {
source(s_all);
filter(f_mail);
filter(f_at_least_info);
destination(df_facility_dot_info);
};
log {
source(s_all);
filter(f_mail);
filter(f_at_least_warn);
destination(df_facility_dot_warn);
};
log {
source(s_all);
filter(f_mail);
filter(f_at_least_err);
destination(df_facility_dot_err);
};
log {
source(s_all);
filter(f_news);
filter(f_at_least_crit);
destination(df_news_dot_crit);
};
log {
source(s_all);
filter(f_news);
filter(f_at_least_err);
destination(df_news_dot_err);
};
log {
source(s_all);
filter(f_news);
filter(f_at_least_notice);
destination(df_news_dot_notice);
};
log {
source(s_all);
filter(f_debug);
destination(df_debug);
};
log {
source(s_all);
filter(f_messages);
destination(df_messages);
};
log {
source(s_all);
filter(f_emerg);
destination(du_all);
};
log {
source(s_all);
filter(f_xconsole);
destination(dp_xconsole);
};
-- debconf-show failed
--
http://www.cruisefish.net
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]