Thanks for the answer anyway! > Juergen, syslogd.conf in /etc lets you tell each item where it gets > logged. This way you can have an nfs log, mail log, ftp log, etc. Read > the man page for this and look at the example. Should be helpful. If > this not what you wanted please repost with a more descriptive > explanation.
Ok, more descriptive: All programs have a log, that's not the problem. The problem is, they all use the same log file. All daemons (dhcpd, sshd, in.telnetd, in.xntpdm, cfingerd, in.qpopper) for example use /var/log/daemon.log because of the line "daemon.* /var/log/daemon.log" in /etc/syslog.conf. So there are many entries of every daemon and it's very complex. A quick overview is impossible. Ok, I could set the level higher, maybe LOG_WARNING or LOG_ERR, but what I want is a splitting by programs. On the SUN we set therefor the facility to some LOG_LOCAL? by changing the source of the daemon and recompiling it. Is this the only posibility or are there others? Are there any scripts doing a splitting by "idents" (man 3 syslog, see "void openlog")? This is what I'm searching for. Thanks for any answers, Juergen ------ [EMAIL PROTECTED]