Hi, does anyone know how to redirect _all_ syslog nessages orinigated from pure-ftpd to a special file using metalog? I have the following lines in my metalog config:
,----[ /etc/metalog/metalog.conf ] | FTP Server : | | facility = "*" | program = "pure-ftpd" | logdir = "/var/log/ftpd" `---- But it puts only _some_ messages in /var/log/ftpd. For example, if a user logs in and immediately logs out: ,----[ /var/log/ftpd/current ] | Feb 2 17:23:27 [pure-ftpd] (?@arrakis) [INFO] New connection from arrakis `---- ,----[ /var/log/everything/current ] | Feb 2 17:23:27 [xinetd] START: ftp pid=1279 from=127.0.0.1 | Feb 2 17:23:27 [xinetd] USERID: ftp UNIX : nobody | Feb 2 17:23:27 [pure-ftpd] (?@arrakis) [INFO] New connection from arrakis | Feb 2 17:23:30 [pure-ftpd(pam_unix)] session opened for user vlad by (uid=0) | Feb 2 17:23:30 [pure-ftpd(pam_unix)] session closed for user vlad | Feb 2 17:23:30 [pure-ftpd (IDLE)] (?@arrakis) [INFO] vlad is now logged in | Feb 2 17:23:33 [pure-ftpd (IDLE)] (vlad@arrakis) [INFO] Logout - CPU time spent: |0.030 seconds. | Feb 2 17:23:33 [xinetd] EXIT: ftp pid=1279 duration=6(sec) `---- As you can see, not all pure-ftpd messages from /var/log/everything go to /var/log/ftpd. I tried to set 'facility = "ftp"' (without 'program') in the metalog config, but it didn't work either (the same result). Something like 'program = "pure-ftpd*"' does not work at all, because metalog doesn't support wildcards in the program statement. -- \ / [EMAIL PROTECTED] \/lad http://www.hashbang.de -- [EMAIL PROTECTED] mailing list
