Hi Mark.. I made the proper changes and still not working.. :(
# vi /etc/syslog-ng/syslog-ng.conf options { chain_hostnames(off); sync(0); perm(0640); dir_perm(0750); create_dirs(yes); stats(43200); } source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); }; source kernsrc { pipe("/proc/kmsg"); }; destination messages { file("/var/log/messages"); }; destination daemon { file("/var/log/daemon.log"); }; filter f_daemon { facility(daemon); }; destination console_all { file("/dev/tty12"); }; log { source(src); filter(f_daemon); destination(daemon); }; log { source(src); destination(messages); }; log { source(src); destination(console_all); }; What is wrong? 2006/6/4, Mick <[EMAIL PROTECTED]>:
On 03/06/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote: > I'm using syslog-ng > > 2006/6/3, Daniel da Veiga <[EMAIL PROTECTED]>: > > On 6/3/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > > > I can't find /var/log/daemon... Every time a service is stopped or I have this in my /var/log/ directory: ============================== -rw-r----- 1 root root 116223 Jun 3 18:08 daemon.log ============================== In addition, check the extract from my /etc/syslog-ng/syslog-ng.conf (which created the daemon.log file in the first place): ============================== options { chain_hostnames(off); sync(0); perm(0640); dir_perm(0750); create_dirs(yes); [snip . . . ] stats(43200); }; source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); }; source kernsrc { pipe("/proc/kmsg"); }; [snip . . . ] destination daemon { file("/var/log/daemon.log"); }; [snip . . . ] #create filters filter f_daemon { facility(daemon); }; [snip . . . ] #connect filter and destination log { source(src); filter(f_daemon); destination(daemon); }; ============================== Adding this in /etc/logrotate.conf ensures that the /var/log/daemon.log file size does not get out of hand: ============================== # when /var/log/daemon.log gets big /var/log/daemon.log { rotate 1 weekly size=1M } ============================== Of course the latter is only relevant if you are using logrotate. HTH. -- Regards, Mick -- gentoo-user@gentoo.org mailing list
-- gentoo-user@gentoo.org mailing list