man syslog.conf
Each block of lines is separated from the previous block by a program or hostname specification. A block will only log messages corresponding to the most recent program and hostname specifications given. Thus, with a block which selects `ppp' as the program, directly followed by a block that selects messages from the hostname `dialhost', the second block will only log messages from the ppp(8) program on dialhost. A program specification is a line beginning with `#!prog' or `! prog' (the former is for compatibility with the previous syslogd, if one is sharing syslog.conf files, for example) and the following blocks will be associ- ated with calls to syslog(3) from that specific program. A program spec- ification for `foo' will also match any message logged by the kernel with the prefix `foo: '. The `#!+prog' or `!+prog' specification works just like the previous one, and the `#!-prog' or `!-prog' specification will match any message but the ones from that program. Multiple programs may be listed, separated by commas: `!prog1,prog2' matches messages from either program, while `!-prog1,prog2' matches all messages but those from `prog1' or `prog2'. A hostname specification of the form `#+hostname' or `+hostname' means the following blocks will be applied to messages received from the speci- fied hostname. Alternatively, the hostname specification `#-hostname' or `-hostname' causes the following blocks to be applied to messages from any host but the one specified. If the hostname is given as `@', the local hostname will be used. As for program specifications, multiple comma-separated values may be specified for hostname specifications. A program or hostname specification may be reset by giving the program or hostname as `*'. Em Qui, 2008-04-10 às 08:50 -0300, Márcio Elias escreveu: > ninguem na lista teria essa solucao usando o syslogd? > > On 4/7/08, Márcio Elias <[EMAIL PROTECTED]> wrote: > > > > tenho interesse na resposta também, caso jah tenha conseguido resolver, > > por favor poste a solução, até agora googlei e nao achei nada com o sislog, > > soh com o syslog-ng... > > > > On Sun, Apr 6, 2008 at 6:34 PM, Ronildo Marques <[EMAIL PROTECTED]> > > wrote: > > > > > Ola Amigos ... > > > Gostaria de acões de um log hosts remote seja inserido em um arquivo > > > /var/log/ronildo.log, o nome do host é maquina01, como eu faço para > > > fazer > > > isso no arquivo /etc/syslog.conf ? > > > Abaixo meu arquivo atual: > > > [EMAIL PROTECTED]:~# cat /etc/syslog.conf > > > # /etc/syslog.conf Configuration file for syslogd. > > > # > > > # For more information see syslog.conf(5) > > > # manpage. > > > > > > # > > > # First some standard logfiles. Log by facility. > > > # > > > > > > auth,authpriv.* /var/log/auth.log > > > *.*;auth,authpriv.none -/var/log/syslog > > > #cron.* /var/log/cron.log > > > daemon.* -/var/log/daemon.log > > > kern.* -/var/log/kern.log > > > lpr.* -/var/log/lpr.log > > > mail.* -/var/log/mail.log > > > user.* -/var/log/user.log > > > *.* @mk > > > # > > > # Logging for the mail system. Split it up so that > > > # it is easy to write scripts to parse these files. > > > # > > > mail.info -/var/log/mail.info > > > mail.warn -/var/log/mail.warn > > > mail.err /var/log/mail.err > > > > > > # Logging for INN news system > > > # > > > news.crit /var/log/news/news.crit > > > news.err /var/log/news/news.err > > > news.notice -/var/log/news/news.notice > > > > > > # > > > # Some `catch-all' logfiles. > > > # > > > *.=debug;\ > > > auth,authpriv.none;\ > > > news.none;mail.none -/var/log/debug > > > *.=info;*.=notice;*.=warn;\ > > > auth,authpriv.none;\ > > > cron,daemon.none;\ > > > mail,news.none -/var/log/messages > > > > > > # > > > # Emergencies are sent to everybody logged in. > > > # > > > *.emerg * > > > > > > # > > > # I like to have messages displayed on the console, but only on a > > > virtual > > > # console I usually leave idle. > > > # > > > #daemon,mail.*;\ > > > # news.=crit;news.=err;news.=notice;\ > > > # *.=debug;*.=info;\ > > > # *.=notice;*.=warn /dev/tty8 > > > > > > # The named pipe /dev/xconsole is for the `xconsole' utility. To use > > > it, > > > # you must invoke `xconsole' with the `-file' option: > > > # > > > # $ xconsole -file /dev/xconsole [...] > > > # > > > # NOTE: adjust the list below, or you'll go crazy if you have a > > > reasonably > > > # busy site.. > > > # > > > daemon.*;mail.*;\ > > > news.err;\ > > > *.=debug;*.=info;\ > > > *.=notice;*.=warn |/dev/xconsole > > > [EMAIL PROTECTED]:~# > > > > > > > > > Abraços: > > > Ronildo Marques > > > ------------------------- > > > Histórico: http://www.fug.com.br/historico/html/freebsd/ > > > Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd > > > > > > > > > > > -- > > _______________________________ > > <? echo "Márcio Elias<br> > > webmaster - webdesigner"; ?> > > > > ------------------------- Histórico: http://www.fug.com.br/historico/html/freebsd/ Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd